App Review Troldesh – Ransomware from Russia!Really testing, not virtual machine!

[Gruja]

A distinctive feature of the Troldesh attack is direct communication with the victim. While the most Ransom-Trojan attackers try to hide themselves and avoid any direct contact, Troldesh’s creators provide their victims with an e-mail address. The attackers use this email correspondence to demand a ransom and dictate a payment method.

 

[cruelsister]

Gruja- Thank you for the video, but be aware that there is nothing special about testing malware that isn't VM aware in a non-VM system. In both cases the result is the same.

Troldesh is interesting in that it attempts to connect to multiple servers in a variety of EU countries (Germany, Denmark, Italy, and the Netherlands primarily) simultaneously.