Collaborate Disseminate
A massive malicious email campaign that stems from the world’s largest spam botnet Necurs is spreading a new strain of ransomware at the rate of over 2 million emails per hour and hitting computers across the globe.
The popular malspam botnet Necrus w… Continue reading World’s Biggest Botnet Just Sent 12.5 Million Emails With Scarab Ransomware
Hit by Jaff Ransomware? Don’t pay the Ransom. You can unlock your files for Free!
Kaspersky Labs has released an updated version 1.21.2.1 of its free ransomware decryption tool, RakhniDecryptor, which can now also decrypt files locked by the Jaff rans… Continue reading Jaff Ransomware Decryption Tool Released – Don’t Pay, Unlock Files for Free
Researchers have neutralized the latest strain of the Jaff ransomware, releasing a decryption tool for unlocking files. Continue reading Decryption Utility Unlocks Files Encrypted by Jaff Ransomware
Continuing with the latest series of emails with pdf attachments that drops a malicious macro enabled Excel XLS file is an email with the subject of Emailing: 288639672 ( random numbers) pretending to come from random names and email address that delivers some sort of malware. Over the last couple of weeks … Continue reading → Continue reading Malspam with pdf attachments dropping macro excel xls files deliver malware
Today has been really busy with a constant stream of malware emails coming from the Necurs botnet delivering either Trickbot banking Trojan or Jaff ransomware. They also found time to send a mass pump & dump stock spam campaign. They have used a variety of subjects including: Invoice PIS2295808 ( random … Continue reading → Continue reading A busy day with necurs botnet mass malspamming multiple Trickbot campaigns and Jaff ransomware thrown into the mix
The malware gang trying to deliver what should be either Dridex, Jaff or Trickbot have made an almighty mistake this morning The email is typical with no subject & a blank empty body with a zip attachment. So far nothing unusual in that. BUT what the apprentice looking after the shop … Continue reading → Continue reading blank email with no subject tries to deliver malware but fails
Researchers have discovered a shared backend infrastructure between the Jaff ransomware and a black market carder shop. Continue reading Jaff Malware Probe Uncovers Link to Cybercrime Marketplace
Continuing with the latest series of emails with pdf attachments that drops a malicious macro enabled word doc is an email with various subjects along the line of receipt, payment, payment receipt etc ( random numbers) pretending to come from donotreply@ random email addresses and companies that delivers Jaff ransomware They are … Continue reading → Continue reading more jaff ransomware delivered via fake receipts or payments emails
Continuing with the latest series of emails with pdf attachments that drops a malicious macro enabled word doc is an email with the subject of 43412591 ( random numbers) pretending to come from noreply@ random companies that delivers Jaff ransomware They are using email addresses and subjects that will scare or entice … Continue reading → Continue reading Copy of Invoice1234567 coming from noreply@ delivers jaff ransomware
Security researchers have had a busy week since the WannaCry ransomware outbreak that wreaked havoc on computers worldwide. How did it all happen?
Categories:
Cybercrime
Exploits
Malware
Tags: botnetDoublePulsarEternalBlueexploitJaff ransomwaremalspa… Continue reading How did the WannaCry Ransomworm spread?