New SamSam Variant Requires Special Password Before Infection

  • 21 June 2018
  • 0 replies
  • 199 views

Userlevel 7
Badge +54
21st June, 2018 By Catalin Cimpanu
 
New versions of the SamSam ransomware will not execute unless the person running the malware's payload enters a special password via the command-line.
 
This is a new protection mechanism added by the SamSam crew in a recent SamSam version discovered by Malwarebytes researchers.
 
Previous versions did not feature this mechanism, meaning anyone who found a SamSam binary could have infected his computer by double-clicking and running the file.
 

                          New SamSam modules and modus operandi
 
Full Article.

0 replies

Be the first to reply!

Reply