Sunday, March 8, 2015

Ransomware Report: The Rise of BandarChor

[f-secure.com] This week, we have received a number of reports on yet another ransomware, BandarChor. This ransomware is not exactly fresh. The first infections that we've noticed related to this family came in already last November. We have had reports of BandarChor being spread via email and have seen indicators that it may have been distributed by exploit kits. Upon execution, the malware drops a copy of itself in Startup directory as well as the ransom notification image. Then it proc…