A ransomware is a virus type that prevents access to certain parts or files of the infected system, and asks for a ransom (money) in exchange for removing this restriction.
What is it and what does it do?
- Some ransomware encrypts operating system files by disabling the device and coercing the user to pay for the rescue.
- Spora, a dangerous ransomware detected in early January by Russian users, began to spread throughout the world
- The first signs of spora, were made in forums of Bleeping Computer and Kaspersky.
- The malware is spread by email, pretending to be a message billing some service.
- The mails had a ZIP file with an HTA file, which is an HTML application and in addition to using double extension, such as PDF.HTA or DOC.HTA,
- The infection occurs after running the ZIP file, it displays a damaged DOC file as a distraction while encrypting the files.
- Spora, does not connect to the internet, generating a different key for each computer.
- It is only responsible for encrypting Excel, Word, images, compressed files or backups. Once the process is finished, the screen with the instructions to solve the problem is displayed.
- Started in Russia, but has expanded to masasíses, Austria, Netherlands, Japan. Is believed to start infecting other countries.
image1
image2
