App Review Ransomware Musings

[cruelsister]

Used is a modified JuicyLemon ransomware file.

 

[_CyberGhosT_]

Awesome heads-up.
What are good products for preventing or cleaning up "SVChost Infections" ?
Thanks CruelSister

 

[SHvFl]

Very interesting video. Thanks for sharing.

 

[NullByte]

Looks like this technique is very similar to userinit injection made by ZeusBotnet but here it's using svchost. What if you use winlogon to make an install on boot