Malware News New Version of GandCrab Ransomware Attack

[Solarquest]

Content source

https://gbhackers-com.cdn.ampproject.org/v/s/gbhackers.com/gandcrab-ransomware-attack-2/amp/?amp_js_v=a2&amp_gsa=1#amp_tf=From%20%251%24s&ampshare=https%3A%2F%2Fgbhackers.com%2Fgandcrab-ransomware-attack-2%2F

The new version of GandCrab ransomware discovered that attack the target system using SMB exploit spreader through compromised websites that posed as a download site.

GandCrab Ransomware Attack is wide spreading Ransomware nowadays with newly updated futures under constant development to target various countries.

Gandcrab Ransomware attackers widely scanning the internet web pages to find out the vulnerable websites and leverage it to distribute the ransomware in wide.

This new version of Gandcrab contains the long hard-coded list of compromised websites that used to connect with it.

The attacker using a specific pseudo-random algorithm to choose the predefined word to generate Complete URL for each host and the final URL generated by following format www.{host}.com/data/tmp/sokakeme.jpg.
...
...