Fake Google Software Updates Spread New Ransomware
Summary
HavanaCrypt is among a growing number of ransomware tools and other malware that in recent months have been distributed in the form of fake updates for Windows 10, Microsoft Exchange, and Google Chrome. Earlier this year, researchers at Malwarebytes observed the operators of the Magnitude Exploit Kit trying to fool users into downloading it by dressing the malware as a Microsoft Edge update. As Malwarebytes noted at the time, fake Flash updates used to be a fixture of Web-based malware campaigns until Adobe finally retired the technology because of security concerns. Creating fake software updates is trivial for attackers, so they tend to use them to distribute all classes of malware including ransomware, info stealers, and Trojans, says an analyst with Intel 471 who requested anonymity. "There is a great deal of badness hosted in cloud environments today, whether its Amazon, Google, or Microsoft and many others," says John Bambenek, principal threat hunter at Netenrich.
Classifications
AskAI Classifications
LabelsLinked Companies
