Critical Windows Update Spam Fails at Delivering Ransomware

[tarekma7]

A new spam campaign pretending to be a 'Critical Microsoft Windows Update' has been discovered that attempts to deliver the Cyborg Ransomware, but turns out to be an utter failure.

In a report from Trustwave that was released today, researchers outline how an attacker is sending spam email that pretends to be a 'Critical' Windows update and prompts the recipient to install it.


Trustwave told BleepingComputer that this spam campaign was not targeted in nature and was sent to recipients all over the world.

The supposed Windows update attached to the email is actually a downloader for the Cyborg Ransomware executable that has been renamed to a random named jpg image file.  This is seen by the hex edit of the JPG file that clearly shows it is an executable.

Continue reading HERE