SOC News: Article

One Article Review

Accueil - L'article:

Source	AhnLab
Identifiant	8306023
Date de publication	2023-01-31 23:29:34 (vue: 2023-02-01 00:07:37)
Titre	TZW Ransomware Being Distributed in Korea
Texte	Through internal monitoring, the ASEC analysis team recently discovered the distribution of the TZW ransomware, which encrypts files before adding the “TZW” file extension to the original extension. This ransomware is being propagated with the version info marked as “System Boot Info”, disguising itself as a normal program file related to boot information. It was created in a .NET format and includes a loader and the actual ransomware data within it. It ultimately loads and executes the ransomware file through...
Envoyé	Oui
Condensat	“system actual adding analysis asec before being boot created data discovered disguising distributed distribution encrypts executes extension file files format includes info info” information internal itself korea loader loads marked monitoring net normal original program propagated ransomware recently related team through tzw ultimately version which within
Tags	Ransomware
Stories
Notes	★★
Move

L'article ne semble pas avoir été repris aprés sa publication.

L'article ne semble pas avoir été repris sur un précédent.