A new malspam campaign pretending to be the current emergency exit map for the recipient's building is being used to install the GandCrab Ransomware. These spam emails contain malicious Word documents that download and install the infection from a remote computer.
According toZaloguj lub Zarejestruj się aby zobaczyć!, who discovered this campaign, a server that was previously distributing the Ursnif banking Trojan has now started pushing GandCrab Ransomware v5.1. BleepingComputer decided to take a look at the spam emails and the files being distributed so that you can see how this campaign works.
Zaloguj lub Zarejestruj się aby zobaczyć!
Zaloguj
lub
Zarejestruj się
aby zobaczyć!