- Jun 9, 2013
- 6,720
A new Ransomware-as-a-Service (RaaS) portal is being advertised on an underground hacking forum, primarily used by Russian-speaking criminals.
Named Fatboy, the service is being promoted by a Russian-speaking criminal named polnowz, who started offering access to the service on March 24.
As the initial RaaS ad attracted its first inquisitive customers, a day later, the first Fatboy sample hit VirusTotal and was picked up by researchers.
While not featuring any new groundbreaking exploits or tactics, the Fatboy ransomware stood out mainly by the ransom note wallpaper, very similar to the one used by Critroni and CTB-Locker, and by its verbose and lengthy HTML ransom notes, which doubled as instructions and guides for infected victims.
Full Article. New Fatboy Ransomware-as-a-Service Advertised on Russian Hacking Forum
Named Fatboy, the service is being promoted by a Russian-speaking criminal named polnowz, who started offering access to the service on March 24.
As the initial RaaS ad attracted its first inquisitive customers, a day later, the first Fatboy sample hit VirusTotal and was picked up by researchers.
While not featuring any new groundbreaking exploits or tactics, the Fatboy ransomware stood out mainly by the ransom note wallpaper, very similar to the one used by Critroni and CTB-Locker, and by its verbose and lengthy HTML ransom notes, which doubled as instructions and guides for infected victims.
Full Article. New Fatboy Ransomware-as-a-Service Advertised on Russian Hacking Forum
