Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

A new ransomware called "ThunderCrypt" infects "eyny" forum


  • Please log in to reply
No replies to this topic

#1 megakotaro

megakotaro

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cyberspace
  • Local time:11:03 AM

Posted 07 May 2017 - 09:59 PM

A new ransomware infects Taiwan forum called "eyny". The forum was hacked on 4/24. When users go to the forum, It will popup a fake flash update.
 
Many users accidentally click it and all their files are encrypted.
5rhAlzoOOIj3Mz7Rgw4P.jpg
 
Sample is here: hxxps://www.sendspace.com/file/ugzbog
password: 123
This is a malicious software sample. DO NOT click it if you are not sure you can protect yourself.
 
The forum has removed the malicious file.

Edited by Orange Blossom, 08 May 2017 - 12:34 AM.
Deactivated link. ~ OB


BC AdBot (Login to Remove)

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users