[SecList]SynAck targeted ransomware uses the Doppelgänging technique

[igor51]

SynAck targeted ransomware uses the Doppelgänging technique

In April 2018, we spotted the first ransomware employing the Process Doppelgänging technique – SynAck ransomware. It should be noted that SynAck is not new, but a recently discovered sample caught our attention after it was found to be using Process Doppelgänging. Here we present the results of our investigation of this new SynAck variant.
Source: SynAck targeted ransomware uses the Doppelgänging technique