fbpx

Ransomware–Zcrypt

Written By 2Secure Corp

Intel Security has recently seen a new kind of ransomware–Zcrypt—that can self-replicate. This “virus ransomware” arrives via email in a malicious attachment or by usurping an Adobe Flash Player installation. The malware copies itself onto removable drives to infect other machines. Zcrypt uses the Nullsoft Scriptable Install System, which works like a Zip file, decompressing and loading the content while running.

Indicators of Compromise

Indicators of Compromise

More Posts

0 Comments

Submit a Comment

Your email address will not be published. Required fields are marked *