Security News > 2016 > September > HDDCryptor ransomware uses open source tools to thoroughly own systems (Help Net Security)

HDDCryptor ransomware uses open source tools to thoroughly own systems (Help Net Security)
2016-09-20 16:59

HDDCryptor (aka Mamba) is a particularly destructive piece of ransomware that encrypts files in mounted drives and network shares, locks the computers’ hard disk, and overwrites their boot disk MBR. This last action leaves the systems unable to boot up, and makes the ransom note appear: The malware uses Netpass, a legitimate tool for recovering all network passwords stored on the system for the current logged-on user, to connect to networked folders and encrypt their … More →


News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/wgr_878KN5k/