Trojan.Winlock threatens Arab users with Sharia court

TheKid7 · Feb 6, 2012

Trojan.Winlock threatens Arab users with Sharia court

Doctor Web's virus analysts discovered a new Trojan.Winlock modification threatening residents of Arab countries. Trojans horses of this family are widely known in Russia since 2010.
Click to expand...

http://news.drweb.com/?i=2194&c=5&lng=en&p=0

Dermot7 · Feb 6, 2012

Seems like another take on what was discussed here: https://www.wilderssecurity.com/showthread.php?t=314551

Those malware authors will think of anything to try...possibilities to "suit" all varying scenarios means more income.

Dermot7 · Feb 23, 2012

Dermot7 said:

Seems like another take on what was discussed here: https://www.wilderssecurity.com/showthread.php?t=314551

Those malware authors will think of anything to try...possibilities to "suit" all varying scenarios means more income.
Click to expand...

Another tempting variation: https://blog.trendmicro.com/compromised-website-for-luxury-cakes-and-pastries-spreads-ransomware/

During the past few days, we’ve been monitoring Laduree.fr, the website of a well-known confectionery company based in France. A seemingly unlikely target for cybercrime, Ladurée’s website was compromised in order to infect users’ systems with ransomware. The ransomware, detected as TROJ_RANSOM.BOV pretends to be notifications from the National Gendarmerie (French: Gendarmerie nationale), commonly known as the French Police Force. It displays a window that covers the entire desktop and demands payment, i.e., holding the system ransom.
Click to expand...

Dermot7 · Mar 3, 2012

Recently, my sandbox came across a scareware that locks down the victim’s computer due to “terrorism and child pornography”. The malware is being detected by some AV vendors as “Win32/LockScreen”.

The schema is pretty simple: The criminals try to infect computers with scareware (eg. through Drive-By exploits). As soon as the computer is infected, the malware locks down the machine so that the user won’t be able to log in any more. The malware then displays a message to the user that the law enforcement agency XY found child pornography on the victims computer and that the his computer was used to send out “spam mails with terrorist motives”
Click to expand...

https://www.abuse.ch/?p=3610

Dermot7 · Mar 9, 2012

Finland now being targeted : https://www.f-secure.com/weblog/archives/00002325.html

Over the past few days we've received reports of Finns being targeted by ransomware which is localized in Finnish language and claims to be from Finnish police.
Click to expand...

Log in or Sign up

Trojan.Winlock threatens Arab users with Sharia court

TheKid7 Registered Member

Dermot7 Registered Member

Dermot7 Registered Member

Dermot7 Registered Member

Dermot7 Registered Member

Log in or Sign up

Trojan.Winlock threatens Arab users with Sharia court

TheKid7 Registered Member

Dermot7 Registered Member

Dermot7 Registered Member

Dermot7 Registered Member

Dermot7 Registered Member

Useful Searches