RANSOMWARE: Fake Copyright Infringement emails contain ransomware
Posted By: Iain Fraser - Cybersecurity Journalist
Analysts at Korean cyber firm AhnLab has discovered the distribution of LockBit ransomware using a phishing e-mail disguised as a copyright infringement notice.
The targeted victim receives emails that warn about a copyright violation, allegedly having used media files without the creator’s license. These emails demand that the recipient remove the infringing content from their websites, or they will face legal action. The attachment is a password-protected ZIP archive containing a compressed file, which in turn has an executable disguised as a PDF document, but it is actually an NSIS installer.
This is a particularly devious method of delivery as everyone who uses images in any capacity whether on the internet or in published content knows the perils of copyright violation.
The psychology of the email is genius in as much as it plays on out inherent fear of an erroneous copyright prosecution and our sense of indignation makes us throw our cybersecurity protocols to the wind and open the file to see what the infringement could be - that's it, you are infected, the malware will load and encrypt the device with the LockBit 2.0 ransomware.
This ransomware prevents recovery by deleting volume shadow copy. Furthermore, to make sure the ransomware runs continuously, it registers Run Key to registry and drops LockBit_Ransomware.hta on the desktop to keep it running even after a desktop change or a reboot. Take steps NOW to secure your network from a Ransomware attack.
About AhnLab
AhnLab develops industry-leading information security solutions and services for consumers, enterprises, and small and medium businesses worldwide. They deliver a comprehensive security line-up, including proven, world-class antivirus products for desktops and servers, mobile security products, online transaction security products, network security appliances, and consulting services. AhnLab has firmly established its market position and manages sales partners in many countries worldwide. Learn More/...
