Wednesday, August 31, 2016

Ransomware Poses as critical Windows Enterprise Update

Businesses are being targeted by hackers using a malware disguised as a critical Windows update.  This Ransomware has been named 'Fantom'. After posing as a legitimate update to Windows Enterprise the screen would lock, not allowing any other applications to be used as Windows is supposedly updating.  In reality what it is doing is encrypting various files and blocking access after which the user is presented with a file consisting of a unique key identifier and a notification that they must pay to get their access back.


Source: http://www.darkreading.com/attacks-breaches/new-fantom-ransomware-poses-as-windows-update/d/d-id/1326774?