New ransomware campaign pilfers passwords before encrypting gigabytes of data

[Moltuae]

New ransomware campaign pilfers passwords before encrypting gigabytes of data

A new wave of crypto ransomware is hitting Windows users courtesy of poorly secured websites. Those sites are infected with Angler, the off-the-shelf, hack-by-numbers exploit kit that saves professional criminals the hassle of developing their own attack.

The latest round is especially nasty because before encryption, the drive-by attacks first use malware known as Pony to harvest any login credentials stored on the infected computer, according to a blog post published by a firm called Heimdal Security.

Full Article: http://arstechnica.com/security/201...asswords-before-encrypting-gigabytes-of-data/