This new variant arrives as a PDF file that contains Javascript blocks and at least one embedded document. When the PDF is viewed, it opens the embedded Microsoft Word document. The embedded document contains a macro that downloads and executes the ransomware payload. The PDF file is distributed via email and malicious websites.
This variant starts encrypting files immediately. After the encryption process starts, TEMASOFT Ranstop detects the ransomware within seconds. The alert is fired up in the notification dialog, while the file recovery and cleanup processes run in the background.
TEMASOFT Ranstop successfully stopped this new PDF-based ransomware variant and recovered the damaged files.
Click here to watch TEMASOFT Ranstop in action (video)!
Virustotal details for the PDF file;
Read our ransomware protection tips!
About TEMASOFT Ranstop
TEMASOFT Ranstop is an anti-ransomware software that detects present and future ransomware, based on file access pattern analysis with a high degree of accuracy. At the same time, it protects user files so that they can be restored in case of malware attacks or accidental loss.
For more information, follow us on social media and subscribe to our newsletter.
This post was last modified on August 21, 2023 7:27 am
In the digital world, information is often stored and transferred through files. From the most…
Introduction Data security is more important than ever in today's fast-paced digital world. One critical…
Introduction: Cyber threats are a growing concern for businesses and individuals alike. With the increasing…
Microsoft Internet Information Services (IIS) is a popular web server that is widely used to…
File tracking is an important aspect of server administration, and it can help administrators detect…
File monitoring solutions are essential tools for administrators to manage and protect their organizations' data…