Beware of Exit Map Spam Pushing GandCrab v5.1 Ransomware

[Mohammad.Poorya]

A new malspam campaign pretending to be the current emergency exit map for the recipient's building is being used to install the GandCrab Ransomware. These spam emails contain malicious Word documents that download and install the infection from a remote computer.

According to Myonlinesecurity.co.uk, who discovered this campaign, a server that was previously distributing the Ursnif banking Trojan has now started pushing GandCrab Ransomware v5.1. BleepingComputer decided to take a look at the spam emails and the files being distributed so that you can see how this campaign works.



https://www.bleepingcomputer.com/news/se...ansomware/