Malware News Fallout Exploit Kit Pushing the SAVEfiles Ransomware

[LASER_oneXM]

Content source

https://www.bleepingcomputer.com/news/security/fallout-exploit-kit-pushing-the-savefiles-ransomware/

Last week the Fallout Exploit kit was distributing the GandCrab ransomware. This week, it has started to distribute a new ransomware called SAVEfiles, for lack of a better name, through malvertising campaigns.

This malvertising campaign was first discovered by exploit kit expert Kafeine, who has told BleepingComputer that IP addresses in Japan, France, and other locations have been targeted. Below you can see a malvertising redirect chain that Kafeine recorded in Fiddler.