Updates are mainly used to patch vulnerabilities, but in today’s case we have to talk about a fake update that hides ransomware. This campaign was discovered a few weeks ago.
Some users on the Bleeping Computer forum have reported that they were infected with the Magniber ransomware after installing what they thought was a Windows update 10. The first indications point to the first cases occurring in the first week of April.
This malicious file comes from websites distributing illegal software. Once installed, The ransomware will encrypt the files and adds to the folder a file with instructions for carrying out the ransom.
Unfortunately, This campaign has focused on students and home users rather than business victims as is usually the case. One must be extremely careful with downloaded files and their source.
Fountain: Bleeping Computer
Image:Photo of php created by rawpixel.com – www.freepik.es