Malware News RSAUtil Ransomware (.helppme@india.com) Installed Via Hacked Remote Desktop Services

[Solarquest]

Today we are going to take a quick look at a new ransomware called RSAUtil that was discovered by Emsisoft malware researcher xXToffeeXx. RSAUtil is distributed by the developer hacking into remote desktop services and uploading a package of files. This package contains a variety of tools, a config file that determines how the ransomware executes, and the ransomware itself.

While this ransomware is currently not decryptable for free, it may be in the future. If you wish to discuss this ransomware or receive support, you can use the dedicated RSAUtil Help & Support topic in our forums

....

.

 

[Solarquest]

On VT 27/57
Antivirus scan for 70796b9d2dc9a178f8127c1b7f17f602134e6c0cbd325bae92e6cee51bbcbd03 at 2017-05-09 07:49:51 UTC - VirusTotal