Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1018841" data-attributes="member: 32260">@<a href="https://malwaretips.com/goto/post?id=1018783" target="_blank">cruelsister</a>,The post mentioned by you gives us too little information about the attack scenario. I realized that many people use the name of the final payload to describe a more complex attack. So indeed, we cannot definitely exclude the possibility that the victim of the Loki ransomware was infected in a more complex scenario (not simple ransomware), like &quot;trojan + ransomware&quot; or &quot;loader + ransomware&quot; (like in your video).The &quot;loader + malware&quot; is pretty much popular nowadays, so it is possible that there are already some samples in the wild mixed with Defender exclusions (&quot;loader + exclusions ---&gt; new malware&quot;). It would be interesting to confirm how popular can be such a mixed scenario against home users. If it becomes popular, then we will see it in some reports soon. So, let&#039;s wait ... <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" /></blockquote>

[QUOTE="Andy Ful, post: 1018841, member: 32260"] @[URL='https://malwaretips.com/goto/post?id=1018783']cruelsister[/URL], The post mentioned by you gives us too little information about the attack scenario. I realized that many people use the name of the final payload to describe a more complex attack. So indeed, we cannot definitely exclude the possibility that the victim of the Loki ransomware was infected in a more complex scenario (not simple ransomware), like "trojan + ransomware" or "loader + ransomware" (like in your video). The "loader + malware" is pretty much popular nowadays, so it is possible that there are already some samples in the wild mixed with Defender exclusions ("loader + exclusions ---> new malware"). It would be interesting to confirm how popular can be such a mixed scenario against home users. If it becomes popular, then we will see it in some reports soon. So, let's wait ... :) [/QUOTE]

Verification