Threat Landscape Dashboard

Top 10 Ransomware

The ransomware targets a range of sectors including healthcare, industrial control, and government. The malicious software seeks out insecure RDP connections as well as vulnerable JBoss systems to carry out its infections. The ransomware was discovered over 2 years with new variants still being released in late 2018.

The ransomware appends various extensions to infected files and is a variant of CrySiS. The malware has been in operation since 2016 and the threat actors behind the ransomware continue to release new variants which are not decryptable.

The ransomware appeared on the threat landscape two years ago with new variants still being discovered in 2018. Recent variants of Matrix append various extensions including .eman, .itlock, .kok08, and .fastbob. Victims are given 7 days to reach the threatthe threat actor for the decryption key to gain access to the encrypted files.

The ransomware uses AES encryption and adds various extensions to infected files. In November 2017 it was discovered the Necurs botnet was used to spread the malicious software. Multiple variants of the ransomware continue to appear on the threat landscape.

The ransomware uses AES encryption and adds a range of extensions including ".STOP", ".SUSPENDED", ".DATASTOP", ".PAUSA", ".CONTACTUS", ".WHY", ".KEYPASS", and ".SAVEfiles" to infected files. The malicious software was discovered at the end of 2017 with new variants appearing on the threat landscape throughout 2018.

The ransomware appends random extensions to encrypted files and requires the victim to email the threat actor for the decryption key. Some variants of the malware are disguised as the SuperAntiSpyware anti-malware application