Security-X
Forum Security-X => News => Discussion démarrée par: igor51 le mars 24, 2017, 23:01:26
-
Improved scripts in .lnk files now deliver Kovter in addition to Locky
Cybercriminals are using a combination of improved script and well-maintained download sites to attempt installing Locky and Kovter on more computers. A few months ago, we reported an email campaign distributing .lnk files with a malicious script that delivered Locky ransomware. Opening the malicious .lnk files executed a PowerShell script that performed a download routine. More...
Source: Improved scripts in .lnk files now deliver Kovter in addition to Locky (https://blogs.technet.microsoft.com/mmpc/2017/02/02/improved-scripts-in-lnk-files-now-deliver-kovter-in-addition-to-locky/)