Experts from Trustwave, a company specializing in information security, reported the discovery of a large-scale spam campaign being used to download ransomware onto victims' PCs disguised as updates for the Windows operating system.
Microsoft never sends emails about needing to update Windows. Clearly, this new campaign to spread malware is targeting those who are unaware of this fact.
Sources indicate that users are receiving messages with the subject line 'Install the latest Microsoft Windows update now!' or 'Critical Microsoft Windows update!'. The email text urges the recipient to quickly install important Windows updates that are supposedly attached to the email. The message does contain an attachment that looks like a JPG image, but is actually an executable .NET file. If you receive a similar email, do not run this file under any circumstances, as it will lead to serious consequences.
The attached file is the Cyborg ransomware, which will encrypt all user files, lock their content, and change the extension to .777. As with other ransomware, the user will receive a text file named Cyborg_DECRYPT.txt with instructions on how to decrypt the files. It's easy to guess that the user is being asked to pay for the decryption, but it’s advisable not to rush into this, as there's no guarantee it will help.
Experts recommend being cautious with unknown emails from unfamiliar people and organizations. You should stay vigilant and not open any attachments unless you are sure of their origin.
Source: 3dnews.ru
