[Trend]R980 Ransomware Found Abusing Disposable Email Address Service

[igor51]

R980 Ransomware Found Abusing Disposable Email Address Service

Perhaps emboldened by the success of their peers, attackers have been releasing more ransomware families and variants with alarming frequency. The latest one added to the list is R980 (detected by Trend Micro as RANSOM_CRYPBEE.A).

R980 has been found to arrive via spam emails, or through compromised websites. Like Locky, Cerber and MIRCOP, spam emails carrying this ransomware contain documents embedded with a malicious macro (detected as W2KM_CRYPBEE.A) that is programmed to download R980 through a particular URL. From the time R980 was detected, there have been active connections to that URL since July 26th of this year.

Post from: Trendlabs Security Intelligence Blog - by Trend Micro

R980 Ransomware Found Abusing Disposable Email Address Service

Source: R980 Ransomware Found Abusing Disposable Email Address Service