Improved scripts in .lnk files now deliver Kovter in addition to LockyCybercriminals are using a combination of improved script and well-maintained download sites to attempt installing Locky and Kovter on more computers. A few months ago, we reported an email campaign distributing .lnk files with a malicious script that delivered Locky ransomware. Opening the malicious .lnk files executed a PowerShell script that performed a download routine. More...
Source:
Improved scripts in .lnk files now deliver Kovter in addition to Locky
