Malware News Spectre Ransomware May Be Coming for you Soon

[Solarquest]

A new ransomware was discovered today by MalwareHunterTeam called Spectre. This ransomware is currently in testing mode by the developer, but due to the time and effort that has been put into it's creation, I would not be surprised to see this go into distribution soon. With this in mind, I decided to play with the sample a bit and create a quick writeup on the Spectre ransomware from my own analysis.

For those who may become infected with this ransomware in the future, you can ask for help in our dedicated Spectre Ransomware Support & Help Topic.

Spectre is Currently in Testing Mode
When Spectre is installed, it will connect to the Command & Control server at the a0142503.xsph.ru/testing.php?mode=a1 URL. The C2 server will then respond with a unique victim ID, bitcoin address, and public key that should be used to encrypt the victims files.

The ransomware will then delete the shadow volume copies and begin to scan the computer for certain file types to encrypt.
....


Thanks to @Der.Reisende sample is already being tested in the Hub.

 

[RECdevicehelper]

Ransomware is getting worse all the time We need to keep sharing the message to people to always backup, backup, backup, don't open attachments from unusual emails and think before clicking a link on the internet. We must do our part

 

[jamescv7]

@RECdevicehelper: Indeed however the problem here is all about the mentality of a person which you cannot prevented it but the main important to be discuss is how to steer away from programs that came from unknown source.

In that matter a person will build a permanent mindset where if it's in the spam message then better not to read or download some things.

 

[RECdevicehelper]

@RECdevicehelper: Indeed however the problem here is all about the mentality of a person which you cannot prevented it but the main important to be discuss is how to steer away from programs that came from unknown source.

In that matter a person will build a permanent mindset where if it's in the spam message then better not to read or download some things.

I would definitely agree with you there @jamescv7. We need to show them how these cyber criminals trick you, the safe place to download programs and how to identify spam and fake emails.