These files include the TOR Browser Bundle and the executable file "!WannaDecryptor!.exe". Once the malware gains access to a user's system, it drops its prerequisite files and components, after which it prompts the user to download files from Dropbox URLs (Dropbox has already been notified of these links, which have since been removed). Wcry initially spreads via an email, a malicious website, or dropped by another malware. This comes on the heels of a TorrentLocker variant that was using abused Dropbox accounts to spread its payload. In a relatively slow week for new ransomware variants, a new ransomware has popped up using the file hosting service Dropbox-specifically, a variant of the WannaCry/Wcry ransomware (Detected by Trend Micro as RANSOM_WCRY.C).
0 kommentar(er)
