Disorderly conduct: localized malware impersonates the police

ronjor · Dec 19, 2011

msft-mmpc
19 Dec 2011

We have recently seen the emergence of several samples of a ransomware family localized into different languages. Malware that relies on localized social engineering tactics has been around for a few years, as we discussed in our two-part series on Program:Win32/Pameseg, and as evident in the surge of password stealers targeting Brazilian online banking websites. Ransomware, which renders a computer unusable and then demands payment, supposedly to make it usable again, has existed for quite some time as well.

What is remarkable in the cases of ransomware we've seen lately is the effort that the authors have put into creating different versions for every targeted country. We've so far seen variants localized into four languages: English, Spanish, German, and Dutch. The list of imitated institutions is also quite long. It includes:
Click to expand...

https://blogs.technet.com/b/mmpc/ar...-impersonates-the-police.aspx?Redirected=true

Meriadoc · Dec 20, 2011

Here's a pic of a Trojan Ransom FakePoliceAlert using BundesPolizei I glean on May 3rd. Checking over at KM VirusTotal was 1/41.

Dermot7 · Jan 19, 2012

"The Rise of the Ransomware" : http://pandalabs.pandasecurity.com/...ource=twitter.com&utm_content=PLRansomPolicia

In the last months we have seen an increase of ransomware attacks. While the first ones we saw were posing as Microsoft to threaten the user because it had been detected a pirated version of Windows, and in case you didn’t pay the fine they would contact the local law enforcement agencies, the new ones are posing as the very same law enforcement agencies.
Click to expand...

Log in or Sign up

Disorderly conduct: localized malware impersonates the police

ronjor Global Moderator

Meriadoc Registered Member

Attached Files:

ransom.JPG

Dermot7 Registered Member

Log in or Sign up

Disorderly conduct: localized malware impersonates the police

ronjor Global Moderator

Meriadoc Registered Member

Attached Files:

ransom.JPG

Dermot7 Registered Member

Useful Searches