{"id":2761,"date":"2019-07-04T13:58:38","date_gmt":"2019-07-04T11:58:38","guid":{"rendered":"https:\/\/www.prosoft.de\/blog\/?p=2761"},"modified":"2025-09-25T12:35:44","modified_gmt":"2025-09-25T10:35:44","slug":"ransomware-as-a-service","status":"publish","type":"post","link":"https:\/\/www.prosoft.de\/blog\/ransomware-as-a-service\/","title":{"rendered":"Ransomware-as-a Service"},"content":{"rendered":"

[et_pb_section fb_built=“1″ specialty=“on“ custom_css_main_1=“max-width:15%;“ disabled_on=“off|off|“ _builder_version=“3.22.3″ module_alignment=“center“ custom_padding=“2px|0px|0|0px|false|false“][et_pb_column type=“1_4″ _builder_version=“3.0.47″][\/et_pb_column][et_pb_column type=“3_4″ specialty_columns=“3″ _builder_version=“3.0.47″][et_pb_row_inner custom_padding=“23px|0px|4px|0px|false|false“ admin_label=“Zeile“ _builder_version=“3.0.47″][et_pb_column_inner type=“4_4″ saved_specialty_column_type=“3_4″ _builder_version=“3.0.47″][et_pb_post_title title=“off“ meta=“off“ featured_placement=“above“ admin_label=“Beitragsbild“ _builder_version=“3.22.7″ locked=“off“][\/et_pb_post_title][et_pb_post_title meta=“off“ featured_image=“off“ admin_label=“Beitragstitel“ _builder_version=“3.24.1″ custom_margin=“20px||“ locked=“off“][\/et_pb_post_title][\/et_pb_column_inner][\/et_pb_row_inner][\/et_pb_column][\/et_pb_section][et_pb_section fb_built=“1″ specialty=“on“ custom_css_main_1=“max-width:15%;“ disabled_on=“off|off|“ _builder_version=“3.22.7″ module_alignment=“center“ custom_padding=“0|0px|0|0px|false|false“][et_pb_column type=“1_4″ _builder_version=“3.0.47″][et_pb_text admin_label=“Tag“ _builder_version=“3.24.1″ _dynamic_attributes=“content“ custom_padding=“||0px“ locked=“off“]@ET-DC@eyJkeW5hbWljIjp0cnVlLCJjb250ZW50IjoicG9zdF9kYXRlIiwic2V0dGluZ3MiOnsiYmVmb3JlIjoiIiwiYWZ0ZXIiOiIuIiwiZGF0ZV9mb3JtYXQiOiJjdXN0b20iLCJjdXN0b21fZGF0ZV9mb3JtYXQiOiJkIn19@[\/et_pb_text][et_pb_text admin_label=“Monat“ _builder_version=“3.21.1″ _dynamic_attributes=“content“ custom_margin=“-5px||2px“ custom_padding=“||0px“ locked=“on“]@ET-DC@eyJkeW5hbWljIjp0cnVlLCJjb250ZW50IjoicG9zdF9kYXRlIiwic2V0dGluZ3MiOnsiYmVmb3JlIjoiIiwiYWZ0ZXIiOiIiLCJkYXRlX2Zvcm1hdCI6ImN1c3RvbSIsImN1c3RvbV9kYXRlX2Zvcm1hdCI6Ik0ifX0=@[\/et_pb_text][et_pb_divider color=“#939393″ divider_weight=“5px“ _builder_version=“3.19.4″ max_width=“25px“ height=“0px“ custom_margin=“0px||“ locked=“on“][\/et_pb_divider][et_pb_text admin_label=“Jahr“ _builder_version=“3.21.1″ _dynamic_attributes=“content“ text_font_size=“11px“ custom_margin=“0px||“ locked=“on“]@ET-DC@eyJkeW5hbWljIjp0cnVlLCJjb250ZW50IjoicG9zdF9kYXRlIiwic2V0dGluZ3MiOnsiYmVmb3JlIjoiIiwiYWZ0ZXIiOiIiLCJkYXRlX2Zvcm1hdCI6ImN1c3RvbSIsImN1c3RvbV9kYXRlX2Zvcm1hdCI6IlkifX0=@[\/et_pb_text][et_pb_text admin_label=“Schlagw\u00f6rter“ _builder_version=“3.19.5″ _dynamic_attributes=“content“ text_font=“|300|on||||||“ text_text_color=“#000000″ text_font_size=“12px“ text_line_height=“1.4em“ border_width_top=“1px“ border_color_top=“#939393″ border_style_top=“dotted“ custom_margin=“10px||“ custom_padding=“14px||“ saved_tabs=“all“ locked=“on“]@ET-DC@eyJkeW5hbWljIjp0cnVlLCJjb250ZW50IjoicG9zdF90YWdzIiwic2V0dGluZ3MiOnsiYmVmb3JlIjoiIiwiYWZ0ZXIiOiIiLCJsaW5rX3RvX3Rlcm1fcGFnZSI6Im9mZiIsInNlcGFyYXRvciI6IiwgIiwiY2F0ZWdvcnlfdHlwZSI6InBvc3RfdGFnIn19@[\/et_pb_text][\/et_pb_column][et_pb_column type=“3_4″ specialty_columns=“3″ _builder_version=“3.0.47″][et_pb_row_inner custom_padding=“23px|0px|32px|0px|false|false“ admin_label=“Zeile“ _builder_version=“3.24.1″][et_pb_column_inner type=“4_4″ saved_specialty_column_type=“3_4″ _builder_version=“3.0.47″][et_pb_text admin_label=“Introtext“ _builder_version=“3.24.1″ text_font=“||on||||||“ border_width_top=“1px“ border_color_top=“#939393″ border_width_bottom=“1px“ border_color_bottom=“#939393″ custom_margin=“10px||25px“ custom_padding=“5px||5px“ z_index_tablet=“500″ text_text_shadow_horizontal_length_tablet=“0px“ text_text_shadow_vertical_length_tablet=“0px“ text_text_shadow_blur_strength_tablet=“1px“ link_text_shadow_horizontal_length_tablet=“0px“ link_text_shadow_vertical_length_tablet=“0px“ link_text_shadow_blur_strength_tablet=“1px“ ul_text_shadow_horizontal_length_tablet=“0px“ ul_text_shadow_vertical_length_tablet=“0px“ ul_text_shadow_blur_strength_tablet=“1px“ ol_text_shadow_horizontal_length_tablet=“0px“ ol_text_shadow_vertical_length_tablet=“0px“ ol_text_shadow_blur_strength_tablet=“1px“ quote_text_shadow_horizontal_length_tablet=“0px“ quote_text_shadow_vertical_length_tablet=“0px“ quote_text_shadow_blur_strength_tablet=“1px“ header_text_shadow_horizontal_length_tablet=“0px“ header_text_shadow_vertical_length_tablet=“0px“ header_text_shadow_blur_strength_tablet=“1px“ header_2_text_shadow_horizontal_length_tablet=“0px“ header_2_text_shadow_vertical_length_tablet=“0px“ header_2_text_shadow_blur_strength_tablet=“1px“ header_3_text_shadow_horizontal_length_tablet=“0px“ header_3_text_shadow_vertical_length_tablet=“0px“ header_3_text_shadow_blur_strength_tablet=“1px“ header_4_text_shadow_horizontal_length_tablet=“0px“ header_4_text_shadow_vertical_length_tablet=“0px“ header_4_text_shadow_blur_strength_tablet=“1px“ header_5_text_shadow_horizontal_length_tablet=“0px“ header_5_text_shadow_vertical_length_tablet=“0px“ header_5_text_shadow_blur_strength_tablet=“1px“ header_6_text_shadow_horizontal_length_tablet=“0px“ header_6_text_shadow_vertical_length_tablet=“0px“ header_6_text_shadow_blur_strength_tablet=“1px“ border_width_top_tablet=“1px“ border_width_top_phone=“1px“ border_width_bottom_tablet=“1px“ border_width_bottom_phone=“1px“ box_shadow_horizontal_tablet=“0px“ box_shadow_vertical_tablet=“0px“ box_shadow_blur_tablet=“40px“ box_shadow_spread_tablet=“0px“ locked=“off“]<\/p>\n

Sodin: Erste \u201esich-selbst-installierende\u201c Ransomware!<\/strong>
Die neue Ransomware Sodin nutzt \u201ealte\u201c Sicherheitsl\u00fccke in Windows und ben\u00f6tigt keine User-Interaktion!<\/p>\n

[\/et_pb_text][et_pb_text admin_label=“Text Beitrag“ _builder_version=“3.24.1″ text_font=“|300|||||||“ text_text_color=“#000000″ z_index_tablet=“500″ text_text_shadow_horizontal_length_tablet=“0px“ text_text_shadow_vertical_length_tablet=“0px“ text_text_shadow_blur_strength_tablet=“1px“ link_text_shadow_horizontal_length_tablet=“0px“ link_text_shadow_vertical_length_tablet=“0px“ link_text_shadow_blur_strength_tablet=“1px“ ul_text_shadow_horizontal_length_tablet=“0px“ ul_text_shadow_vertical_length_tablet=“0px“ ul_text_shadow_blur_strength_tablet=“1px“ ol_text_shadow_horizontal_length_tablet=“0px“ ol_text_shadow_vertical_length_tablet=“0px“ ol_text_shadow_blur_strength_tablet=“1px“ quote_text_shadow_horizontal_length_tablet=“0px“ quote_text_shadow_vertical_length_tablet=“0px“ quote_text_shadow_blur_strength_tablet=“1px“ header_text_shadow_horizontal_length_tablet=“0px“ header_text_shadow_vertical_length_tablet=“0px“ header_text_shadow_blur_strength_tablet=“1px“ header_2_text_shadow_horizontal_length_tablet=“0px“ header_2_text_shadow_vertical_length_tablet=“0px“ header_2_text_shadow_blur_strength_tablet=“1px“ header_3_text_shadow_horizontal_length_tablet=“0px“ header_3_text_shadow_vertical_length_tablet=“0px“ header_3_text_shadow_blur_strength_tablet=“1px“ header_4_text_shadow_horizontal_length_tablet=“0px“ header_4_text_shadow_vertical_length_tablet=“0px“ header_4_text_shadow_blur_strength_tablet=“1px“ header_5_text_shadow_horizontal_length_tablet=“0px“ header_5_text_shadow_vertical_length_tablet=“0px“ header_5_text_shadow_blur_strength_tablet=“1px“ header_6_text_shadow_horizontal_length_tablet=“0px“ header_6_text_shadow_vertical_length_tablet=“0px“ header_6_text_shadow_blur_strength_tablet=“1px“ box_shadow_horizontal_tablet=“0px“ box_shadow_vertical_tablet=“0px“ box_shadow_blur_tablet=“40px“ box_shadow_spread_tablet=“0px“]Unglaublich aber wahr:<\/strong><\/p>\n

Sodin wird als Exploit Baukasten \u00fcber ein \u201ePartnerprogramm\u201c verbreitet.<\/h3>\n

Die Entwickler haben den Code so gestaltet, dass sie bestimmen k\u00f6nnen wie die Ransomware verbreitet wird und auch die M\u00f6glichkeit integriert, entsprechende \u201eMalware-Distributoren\u201c explizit ein- bzw. auszuschlie\u00dfen. Zus\u00e4tzlich k\u00f6nnen die Entwickler durch einen Hauptschl\u00fcssel verschl\u00fcsselte Daten von Opfern selektiv entschl\u00fcsseln ohne, dass dies von Betroffenen oder Partnern bemerkt werden kann.<\/p>\n

Die Ransomware Sodin macht sich die bereits in 2018 entdeckte Schwachstelle CVE-2018-8453 in Microsoft Windows zu Nutze und erweitert dadurch seine Berechtigungen auf den betroffenen Systemen. In der Folge nutzt Sodin die Architektur Central Processing Unit (CPU) und die \u201eHeaven\u2019s Gate\u201c Technik um seine Erkennung zu vermeiden. Neu ist, dass zur Installation keine Aktion der User, also z.B. das \u00d6ffnen von Dateien oder Anklicken eines Links erforderlich ist.<\/p>\n

Die Anf\u00e4lligkeit wurde bereits im August 2018 von Kaspersky an Microsoft gemeldet und im Oktober durch einen Sicherheitspatch von Microsoft geschlossen. Laut Kaspersky ist der Exploit Code \u201evon hoher Qualit\u00e4t\u201c und so geschrieben dass er bei sehr vielen Windows Builds einschlie\u00dflich Windows 10 RS4 funktioniert. Zun\u00e4chst sind nur Angriffe im asiatischen Raum entdeckt worden. Seit kurzem treibt die Ransomware aber auch in Europa Ihr Unwesen.[\/et_pb_text][et_pb_divider color=“#939393″ divider_position=“center“ _builder_version=“3.24.1″][\/et_pb_divider][\/et_pb_column_inner][\/et_pb_row_inner][\/et_pb_column][\/et_pb_section][et_pb_section fb_built=“1″ specialty=“on“ custom_css_main_1=“max-width:15%“ _builder_version=“3.22.3″ custom_padding=“0|0px|0|0px|false|false“ custom_css_main_element=“background-color: #efefef“][et_pb_column type=“1_4″ _builder_version=“3.0.47″][et_pb_image src=“https:\/\/www.prosoft.de\/blog\/wp-content\/uploads\/2018\/12\/fazit.svg“ align_tablet=“center“ align_last_edited=“on|desktop“ disabled_on=“on|on|“ admin_label=“Bild Fazit“ _builder_version=“3.23″ max_width=“35%“ module_alignment=“right“ saved_tabs=“all“ locked=“off“][\/et_pb_image][\/et_pb_column][et_pb_column type=“3_4″ specialty_columns=“3″ _builder_version=“3.0.47″][et_pb_row_inner admin_label=“Zeile“ _builder_version=“3.22.7″][et_pb_column_inner type=“4_4″ saved_specialty_column_type=“3_4″ _builder_version=“3.0.47″][et_pb_text admin_label=“Text FAZIT“ _builder_version=“3.24.1″ z_index_tablet=“500″ box_shadow_horizontal_tablet=“0px“ box_shadow_vertical_tablet=“0px“ box_shadow_blur_tablet=“40px“ box_shadow_spread_tablet=“0px“]<\/p>\n

FAZIT:<\/strong> Wir empfehlen die installierten Betriebssysteme und Applikationen regelm\u00e4\u00dfig durch Patch-Management<\/a> zu aktualisieren. In diesem Fall gibt es einen Patch gegen CVE-2018-8453 bereits seit Oktober 2018. Au\u00dferdem muss eine entsprechende Anti-Malware bzw. Endpoint-Security L\u00f6sung installiert und up-to-date sein.<\/p>\n

Links zum Beitrag:<\/strong>
Microsoft Hinweis zu CVE-2018-8453<\/a>
Kaspersky Hinweis zu Sodin Ransomware<\/a><\/p>\n

[\/et_pb_text][\/et_pb_column_inner][\/et_pb_row_inner][\/et_pb_column][\/et_pb_section][et_pb_section fb_built=“1″ admin_label=“Auto und Beitragsnavi“ _builder_version=“3.19.17″ custom_padding=“0|0px|2px|0px|false|false“ global_module=“2039″][et_pb_row custom_padding=“24px|0px|35px|0px|false|false“ _builder_version=“3.22.3″ background_size=“initial“ background_position=“top_left“ background_repeat=“repeat“ max_width=“1080px“][et_pb_column type=“4_4″ _builder_version=“3.0.47″][et_pb_image src=“https:\/\/www.prosoft.de\/blog\/wp-content\/uploads\/2019\/02\/red-nachtigall.png“ align=“center“ align_tablet=“center“ align_last_edited=“on|desktop“ admin_label=“Bild Nachtigall“ _builder_version=“3.23″ z_index_tablet=“500″ custom_css_main_element=“max-width:100px;;“][\/et_pb_image][et_pb_text admin_label=“Text Willy Nachtigall“ _builder_version=“3.22.7″ text_orientation=“center“ z_index_tablet=“500″]<\/p>\n

Willy Nachtigall<\/strong><\/em><\/a><\/p>\n

[\/et_pb_text][et_pb_text admin_label=“Beschreibung Willy Nachtigall“ _builder_version=“3.22.7″ text_font_size=“12px“ text_line_height=“1.2em“ text_orientation=“center“ custom_margin=“-10px||“]<\/p>\n

Redakteur und Technischer Support Manager<\/p>\n

[\/et_pb_text][et_pb_divider color=“#009ee2″ divider_weight=“5px“ _builder_version=“3.23.4″ max_width=“20%“ module_alignment=“center“ height=“0px“][\/et_pb_divider][et_pb_post_nav in_same_term=“off“ prev_text=“Vorheriger Beitrag“ next_text=“N\u00e4chster Beitrag“ admin_label=“Beitragsnavigation“ _builder_version=“3.22.7″ title_font=“||||||||“ title_text_color=“#009ee2″][\/et_pb_post_nav][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=“1″ disabled_on=“|on|off“ admin_label=“Section Newsletter Anmeldung“ module_id=“newsletter“ _builder_version=“3.19.17″ background_color=“#002b54″ custom_padding=“0|0px|0|0px|false|false“ global_module=“433″][et_pb_row custom_padding=“24px|0px|0|0px|false|false“ _builder_version=“3.24″ max_width=“1080px“ animation_direction=“left“][et_pb_column type=“4_4″ _builder_version=“3.0.47″][et_pb_image src=“https:\/\/www.prosoft.de\/blog\/wp-content\/uploads\/2019\/02\/pro_blog_newsletter-2.svg“ align=“center“ align_tablet=“center“ align_last_edited=“on|desktop“ admin_label=“Bild Icon Newsletter“ _builder_version=“3.23″ max_width=“150px“ animation_style=“slide“ animation_direction=“top“][\/et_pb_image][et_pb_text admin_label=“Der ProBlog Newsletter“ _builder_version=“3.19.15″ text_font=“|300|||||||“ text_font_size=“14px“ text_line_height=“1.3em“ background_layout=“dark“ custom_padding=“||0px“ animation_direction=“left“]<\/p>\n

Der ProBlog Newsletter<\/h1>\n
Bleiben Sie auf dem Laufenden mit unseren interessanten News, Updates und Insights
zu modernen IT-Security & IT-Infrastruktur-L\u00f6sungen.<\/h5>\n

Members Only:
Alle Newsletter-Empf\u00e4nger erhalten jetzt Zugriff auf exklusive Inhalte!<\/p>\n

Bitte f\u00fcllen Sie kurz das Formular aus.
Anschlie\u00dfend erhalten Sie eine E-Mail, mit der Sie Ihre Anmeldung best\u00e4tigen k\u00f6nnen.<\/p>\n

[\/et_pb_text][et_pb_text admin_label=“Anmeldeformular Newsletter“ _builder_version=“3.19.15″ text_font_size=“12px“ text_orientation=“center“ background_layout=“dark“ custom_margin=“-50px||“ animation_style=“fade“ animation_direction=“bottom“]<\/p>\n

\u00a0<\/p>\n

[newsletter_form button_label=“Jetzt anmelden“]\u00a0 [newsletter_field name=“surname“ placeholder=“Firma“ label=““] [newsletter_field name=“first_name“\u00a0 placeholder=“Name“ label=““] [newsletter_field name=“email“ placeholder=“Email“ label=““] Mit der Anmeldung akzeptiere ich die Datenschutzbestimmungen<\/a> der ProSoft GmbH.
[\/newsletter_form]<\/p>\n

\u00a0<\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=“1″ _builder_version=“3.22.3″ background_color=“#a7b7c7″ custom_padding=“0|0px|0|0px|false|false“ global_module=“179″][et_pb_row custom_padding=“24px|0px|40px|0px|false|false“ _builder_version=“3.22.3″ background_size=“initial“ background_position=“top_left“ background_repeat=“repeat“][et_pb_column type=“1_3″ _builder_version=“3.0.47″][et_pb_text admin_label=“Der ProBlog“ _builder_version=“3.24″ background_layout=“dark“]<\/p>\n

Der ProBlog<\/h3>\n

[\/et_pb_text][et_pb_divider color=“#ffffff“ _builder_version=“3.19.4″ height=“10px“ custom_margin=“-10px||“][\/et_pb_divider][et_pb_text admin_label=“ist ein Angebot der“ _builder_version=“3.19.4″ text_font_size=“12px“ text_line_height=“1.2em“ background_layout=“dark“]<\/p>\n

ist ein Angebot der<\/p>\n

ProSoft GmbH
B\u00fcrgermeister-Graf-Ring 10
82538 Geretsried<\/p>\n

 <\/p>\n

[\/et_pb_text][et_pb_social_media_follow _builder_version=“3.19.16″ custom_margin=“|0px||“ custom_padding=“|0px||0px“ locked=“off“][et_pb_social_media_follow_network social_network=“facebook“ url=“https:\/\/www.facebook.com\/prosoft.de\/“ _builder_version=“3.19.5″ background_color=“#3b5998″ follow_button=“off“ url_new_window=“on“]Facebook[\/et_pb_social_media_follow_network][et_pb_social_media_follow_network social_network=“twitter“ url=“https:\/\/twitter.com\/prosoft_de\/“ _builder_version=“3.19.5″ background_color=“#00aced“ follow_button=“off“ url_new_window=“on“]twitter[\/et_pb_social_media_follow_network][et_pb_social_media_follow_network social_network=“youtube“ url=“https:\/\/www.youtube.com\/user\/Prosoft“ _builder_version=“3.19.5″ background_color=“#a82400″ follow_button=“off“ url_new_window=“on“]youtube[\/et_pb_social_media_follow_network][\/et_pb_social_media_follow][\/et_pb_column][et_pb_column type=“1_3″ _builder_version=“3.0.47″][et_pb_text admin_label=“Kontakt“ _builder_version=“3.19.4″ background_layout=“dark“]<\/p>\n

Kontakt und Support<\/h3>\n

[\/et_pb_text][et_pb_divider color=“#ffffff“ _builder_version=“3.19.4″ height=“10px“ custom_margin=“-10px||“][\/et_pb_divider][et_pb_text admin_label=“Telefon +49 (0) 8171\/405-0″ _builder_version=“3.24″ text_font_size=“12px“ text_line_height=“1.2em“ background_layout=“dark“]<\/p>\n

Telefon +49 (0) 8171\/405-0
Fax\u00a0 + 49 (0) 8171\/405-400
info@prosoft.de<\/span> <\/a><\/span><\/p>\n

[\/et_pb_text][et_pb_text admin_label=“Links ProSoft“ _builder_version=“3.19.16″ text_font_size=“12px“ text_line_height=“1.2em“ background_layout=“dark“]<\/p>\n

\u279d ProSoft Webseite<\/a>
\u279d ProSoft Shop<\/a>
\u279d ProSoft FAQ<\/a><\/span><\/p>\n

[\/et_pb_text][\/et_pb_column][et_pb_column type=“1_3″ _builder_version=“3.0.47″][et_pb_text admin_label=“Sitemap & Links“ _builder_version=“3.19.16″ background_layout=“dark“]<\/p>\n

Mehr dazu<\/h3>\n

[\/et_pb_text][et_pb_divider color=“#ffffff“ _builder_version=“3.19.4″ height=“10px“ custom_margin=“-10px||“][\/et_pb_divider][et_pb_text admin_label=“Links Impressum etc“ _builder_version=“3.19.16″ text_font_size=“12px“ text_line_height=“1.2em“ background_layout=“dark“]<\/p>\n

\u279d Impressum<\/a>
<\/a>\u279d Datenschutz<\/a>
\u279d<\/span> Redaktion<\/a>
\u279d \u00dcber uns<\/a><\/span><\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"

Sodin: Erste \u201esich-selbst-installierende\u201c Ransomware!
\nDie neue Bedrohung nutzt \u201ealte\u201c Sicherheitsl\u00fccke in Windows und ben\u00f6tigt keine User-Interaktion!<\/p>\n","protected":false},"author":7,"featured_media":2765,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"footnotes":""},"categories":[58,69,56,576],"tags":[84,47,53,85],"class_list":["post-2761","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-it-security-im-prosoft-blog","category-malware","category-patch-verwaltung","category-schwachstellen","tag-cve-2018-8453","tag-patch-management","tag-ransomware","tag-windows-sicherheitsluecke"],"yoast_head":"\nRansomware-as-a Service - ProSoft Blog<\/title>\n<meta name=\"description\" content=\"Sodin Ransomware-as-a-Service \u2013 installiert sich ohne Anwender Interaktion und nutzt Windows Sicherheitsl\u00fccke aus 2018 \u2013 ProBlog IT-Security\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.prosoft.de\/blog\/ransomware-as-a-service\/\" \/>\n<meta property=\"og:locale\" content=\"de_DE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ransomware-as-a Service: Sodin\" \/>\n<meta property=\"og:description\" content=\"Die neue Ransomware nutzt \u201ealte\u201c Sicherheitsl\u00fccke in Windows und ben\u00f6tigt keine User-Interaktion!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.prosoft.de\/blog\/ransomware-as-a-service\/\" \/>\n<meta property=\"og:site_name\" content=\"ProSoft Blog\" \/>\n<meta property=\"article:published_time\" content=\"2019-07-04T11:58:38+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-25T10:35:44+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.prosoft.de\/blog\/wp-content\/uploads\/2019\/07\/ransomew.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"504\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Robert Korherr\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Patch Tuesday Mai 2019\" \/>\n<meta name=\"twitter:description\" content=\"Informationen zum aktuellen Patchday\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.prosoft.de\/blog\/wp-content\/uploads\/2018\/12\/h-patchday-01-2019.jpg\" \/>\n<meta name=\"twitter:creator\" content=\"@prosoft_de\" \/>\n<meta name=\"twitter:site\" content=\"@prosoft_de\" \/>\n<meta name=\"twitter:label1\" content=\"Verfasst von\" \/>\n\t<meta name=\"twitter:data1\" content=\"Robert Korherr\" \/>\n\t<meta name=\"twitter:label2\" content=\"Gesch\u00e4tzte Lesezeit\" \/>\n\t<meta name=\"twitter:data2\" content=\"12\u00a0Minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/ransomware-as-a-service\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/ransomware-as-a-service\\\/\"},\"author\":{\"name\":\"Robert Korherr\",\"@id\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/#\\\/schema\\\/person\\\/ceb0d9eb1290da52ff802aaf2231d811\"},\"headline\":\"Ransomware-as-a Service\",\"datePublished\":\"2019-07-04T11:58:38+00:00\",\"dateModified\":\"2025-09-25T10:35:44+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/ransomware-as-a-service\\\/\"},\"wordCount\":2379,\"publisher\":{\"@id\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/ransomware-as-a-service\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/07\\\/ransomew.jpg\",\"keywords\":[\"CVE-2018-8453\",\"Patch-Management\",\"Ransomware\",\"Windows Sicherheitsl\u00fccke\"],\"articleSection\":[\"IT-Security\",\"Malware\",\"Patch-Verwaltung\",\"Schwachstellen\"],\"inLanguage\":\"de\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/ransomware-as-a-service\\\/\",\"url\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/ransomware-as-a-service\\\/\",\"name\":\"Ransomware-as-a Service - ProSoft Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/ransomware-as-a-service\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/ransomware-as-a-service\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/07\\\/ransomew.jpg\",\"datePublished\":\"2019-07-04T11:58:38+00:00\",\"dateModified\":\"2025-09-25T10:35:44+00:00\",\"description\":\"Sodin Ransomware-as-a-Service \u2013 installiert sich ohne Anwender Interaktion und nutzt Windows Sicherheitsl\u00fccke aus 2018 \u2013 ProBlog IT-Security\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/ransomware-as-a-service\\\/#breadcrumb\"},\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/ransomware-as-a-service\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/ransomware-as-a-service\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/07\\\/ransomew.jpg\",\"contentUrl\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/07\\\/ransomew.jpg\",\"width\":800,\"height\":504,\"caption\":\"Ransomeware\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/ransomware-as-a-service\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ransomware-as-a Service\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/\",\"name\":\"ProSoft Blog\",\"description\":\"ProSoft GmbH | Manage, Secure, Optimise IT\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"de\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/#organization\",\"name\":\"ProSoft Blog\",\"url\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/Logo-schwarz-orange-slogan.jpg\",\"contentUrl\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/Logo-schwarz-orange-slogan.jpg\",\"width\":1200,\"height\":344,\"caption\":\"ProSoft Blog\"},\"image\":{\"@id\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/prosoft_de\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/prosoft-security-gmbh\\\/\",\"https:\\\/\\\/www.youtube.com\\\/user\\\/Prosoft\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/#\\\/schema\\\/person\\\/ceb0d9eb1290da52ff802aaf2231d811\",\"name\":\"Robert Korherr\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e900784c694475c7a8f5cdce3dd3798a7f7fbfb92c18987ad95eeaf920cdc59b?s=96&d=blank&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e900784c694475c7a8f5cdce3dd3798a7f7fbfb92c18987ad95eeaf920cdc59b?s=96&d=blank&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e900784c694475c7a8f5cdce3dd3798a7f7fbfb92c18987ad95eeaf920cdc59b?s=96&d=blank&r=g\",\"caption\":\"Robert Korherr\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/robertkorherr\\\/\"],\"url\":\"https:\\\/\\\/www.prosoft.de\\\/blog\\\/author\\\/robert-korherrprosoft-de\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Ransomware-as-a Service - ProSoft Blog","description":"Sodin Ransomware-as-a-Service \u2013 installiert sich ohne Anwender Interaktion und nutzt Windows Sicherheitsl\u00fccke aus 2018 \u2013 ProBlog IT-Security","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.prosoft.de\/blog\/ransomware-as-a-service\/","og_locale":"de_DE","og_type":"article","og_title":"Ransomware-as-a Service: Sodin","og_description":"Die neue Ransomware nutzt \u201ealte\u201c Sicherheitsl\u00fccke in Windows und ben\u00f6tigt keine User-Interaktion!","og_url":"https:\/\/www.prosoft.de\/blog\/ransomware-as-a-service\/","og_site_name":"ProSoft Blog","article_published_time":"2019-07-04T11:58:38+00:00","article_modified_time":"2025-09-25T10:35:44+00:00","og_image":[{"width":800,"height":504,"url":"https:\/\/www.prosoft.de\/blog\/wp-content\/uploads\/2019\/07\/ransomew.jpg","type":"image\/jpeg"}],"author":"Robert Korherr","twitter_card":"summary_large_image","twitter_title":"Patch Tuesday Mai 2019","twitter_description":"Informationen zum aktuellen Patchday","twitter_image":"https:\/\/www.prosoft.de\/blog\/wp-content\/uploads\/2018\/12\/h-patchday-01-2019.jpg","twitter_creator":"@prosoft_de","twitter_site":"@prosoft_de","twitter_misc":{"Verfasst von":"Robert Korherr","Gesch\u00e4tzte Lesezeit":"12\u00a0Minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.prosoft.de\/blog\/ransomware-as-a-service\/#article","isPartOf":{"@id":"https:\/\/www.prosoft.de\/blog\/ransomware-as-a-service\/"},"author":{"name":"Robert Korherr","@id":"https:\/\/www.prosoft.de\/blog\/#\/schema\/person\/ceb0d9eb1290da52ff802aaf2231d811"},"headline":"Ransomware-as-a Service","datePublished":"2019-07-04T11:58:38+00:00","dateModified":"2025-09-25T10:35:44+00:00","mainEntityOfPage":{"@id":"https:\/\/www.prosoft.de\/blog\/ransomware-as-a-service\/"},"wordCount":2379,"publisher":{"@id":"https:\/\/www.prosoft.de\/blog\/#organization"},"image":{"@id":"https:\/\/www.prosoft.de\/blog\/ransomware-as-a-service\/#primaryimage"},"thumbnailUrl":"https:\/\/www.prosoft.de\/blog\/wp-content\/uploads\/2019\/07\/ransomew.jpg","keywords":["CVE-2018-8453","Patch-Management","Ransomware","Windows Sicherheitsl\u00fccke"],"articleSection":["IT-Security","Malware","Patch-Verwaltung","Schwachstellen"],"inLanguage":"de"},{"@type":"WebPage","@id":"https:\/\/www.prosoft.de\/blog\/ransomware-as-a-service\/","url":"https:\/\/www.prosoft.de\/blog\/ransomware-as-a-service\/","name":"Ransomware-as-a Service - ProSoft Blog","isPartOf":{"@id":"https:\/\/www.prosoft.de\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.prosoft.de\/blog\/ransomware-as-a-service\/#primaryimage"},"image":{"@id":"https:\/\/www.prosoft.de\/blog\/ransomware-as-a-service\/#primaryimage"},"thumbnailUrl":"https:\/\/www.prosoft.de\/blog\/wp-content\/uploads\/2019\/07\/ransomew.jpg","datePublished":"2019-07-04T11:58:38+00:00","dateModified":"2025-09-25T10:35:44+00:00","description":"Sodin Ransomware-as-a-Service \u2013 installiert sich ohne Anwender Interaktion und nutzt Windows Sicherheitsl\u00fccke aus 2018 \u2013 ProBlog IT-Security","breadcrumb":{"@id":"https:\/\/www.prosoft.de\/blog\/ransomware-as-a-service\/#breadcrumb"},"inLanguage":"de","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.prosoft.de\/blog\/ransomware-as-a-service\/"]}]},{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/www.prosoft.de\/blog\/ransomware-as-a-service\/#primaryimage","url":"https:\/\/www.prosoft.de\/blog\/wp-content\/uploads\/2019\/07\/ransomew.jpg","contentUrl":"https:\/\/www.prosoft.de\/blog\/wp-content\/uploads\/2019\/07\/ransomew.jpg","width":800,"height":504,"caption":"Ransomeware"},{"@type":"BreadcrumbList","@id":"https:\/\/www.prosoft.de\/blog\/ransomware-as-a-service\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/www.prosoft.de\/blog\/"},{"@type":"ListItem","position":2,"name":"Ransomware-as-a Service"}]},{"@type":"WebSite","@id":"https:\/\/www.prosoft.de\/blog\/#website","url":"https:\/\/www.prosoft.de\/blog\/","name":"ProSoft Blog","description":"ProSoft GmbH | Manage, Secure, Optimise IT","publisher":{"@id":"https:\/\/www.prosoft.de\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.prosoft.de\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"de"},{"@type":"Organization","@id":"https:\/\/www.prosoft.de\/blog\/#organization","name":"ProSoft Blog","url":"https:\/\/www.prosoft.de\/blog\/","logo":{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/www.prosoft.de\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.prosoft.de\/blog\/wp-content\/uploads\/2023\/10\/Logo-schwarz-orange-slogan.jpg","contentUrl":"https:\/\/www.prosoft.de\/blog\/wp-content\/uploads\/2023\/10\/Logo-schwarz-orange-slogan.jpg","width":1200,"height":344,"caption":"ProSoft Blog"},"image":{"@id":"https:\/\/www.prosoft.de\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/prosoft_de","https:\/\/www.linkedin.com\/company\/prosoft-security-gmbh\/","https:\/\/www.youtube.com\/user\/Prosoft"]},{"@type":"Person","@id":"https:\/\/www.prosoft.de\/blog\/#\/schema\/person\/ceb0d9eb1290da52ff802aaf2231d811","name":"Robert Korherr","image":{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/secure.gravatar.com\/avatar\/e900784c694475c7a8f5cdce3dd3798a7f7fbfb92c18987ad95eeaf920cdc59b?s=96&d=blank&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/e900784c694475c7a8f5cdce3dd3798a7f7fbfb92c18987ad95eeaf920cdc59b?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e900784c694475c7a8f5cdce3dd3798a7f7fbfb92c18987ad95eeaf920cdc59b?s=96&d=blank&r=g","caption":"Robert Korherr"},"sameAs":["https:\/\/www.linkedin.com\/in\/robertkorherr\/"],"url":"https:\/\/www.prosoft.de\/blog\/author\/robert-korherrprosoft-de\/"}]}},"_links":{"self":[{"href":"https:\/\/www.prosoft.de\/blog\/wp-json\/wp\/v2\/posts\/2761","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.prosoft.de\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.prosoft.de\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.prosoft.de\/blog\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.prosoft.de\/blog\/wp-json\/wp\/v2\/comments?post=2761"}],"version-history":[{"count":2,"href":"https:\/\/www.prosoft.de\/blog\/wp-json\/wp\/v2\/posts\/2761\/revisions"}],"predecessor-version":[{"id":49302,"href":"https:\/\/www.prosoft.de\/blog\/wp-json\/wp\/v2\/posts\/2761\/revisions\/49302"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.prosoft.de\/blog\/wp-json\/wp\/v2\/media\/2765"}],"wp:attachment":[{"href":"https:\/\/www.prosoft.de\/blog\/wp-json\/wp\/v2\/media?parent=2761"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.prosoft.de\/blog\/wp-json\/wp\/v2\/categories?post=2761"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.prosoft.de\/blog\/wp-json\/wp\/v2\/tags?post=2761"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}