App Review CryptOLOcker Ransomware - Demonstration of attack

[GrujaRS]

Ransom note;HOW_TO_RESTORE_FILES.html.

 

[GrujaRS]

Ransom note;HOW_TO_RESTORE_FILES.html.

Virus Total 0/56 Antivirus scan for b05c9fb690bf745884cf9d6154c56fce30bc98540ac546ae28f9f557d4f88b61 at 2017-03-18 10:09:29 UTC - VirusTotal

 

[Deleted Member 3a5v73x]

I assume Kaspersky would still have taken care of this ransom if it didn't have sigs for it and rolled back encryption right? if "System Watcher" was enabled and before encryption takes place, file copies created with "Kaspersky Cryptomalware Countermeasures Subsystem" technology like shown in this video?

 

[erreale]

I assume Kaspersky would still have taken care of this ransom if it didn't have sigs for it and rolled back encryption right? if "System Watcher" was enabled and before encryption takes place, file copies created with "Kaspersky Cryptomalware Countermeasures Subsystem" technology like shown in this video?

It would be interesting to test with this ransom

 

[erreale]

There are "too many" steps to not get suspicious. You must first allow the PDF to download the doc, then the file must run it, then enable editing and then authorize the macro execution ...
Sooner or later I expect some malware that says to dip notebok in a bucket of water. And I expect that someone will do it.