{"id":29285,"date":"2019-01-22T04:00:39","date_gmt":"2019-01-22T09:00:39","guid":{"rendered":"http:\/\/blog.cybercon1.com\/?p=29285"},"modified":"2019-01-22T04:00:39","modified_gmt":"2019-01-22T09:00:39","slug":"old-ransomware-is-using-an-unpleasant-new-trick","status":"publish","type":"post","link":"https:\/\/blog.cyberconservices.com\/index.php\/2019\/01\/22\/old-ransomware-is-using-an-unpleasant-new-trick\/","title":{"rendered":"Old ransomware is using an unpleasant new trick"},"content":{"rendered":"\n<div class=\"wp-block-image\"><figure class=\"alignleft is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.cyberconservices.com\/wp-content\/uploads\/2019\/01\/ransomware-2320793__340.jpg\" alt=\"\" class=\"wp-image-29286\" width=\"358\" height=\"230\"\/><\/figure><\/div>\n\n\n\n<p>An old family of <strong>ransomware<\/strong> has returned with a new campaign which uses information about children stolen from crowdfunding websites and claims that payments made in exchange for unlocking encrypted files will be donated to good causes.  <\/p>\n\n\n\n<p>First spotted in early 2016,&nbsp;<a href=\"https:\/\/www.zdnet.com\/article\/this-malvertising-campaign-infected-pcs-with-ransomware-without-users-even-clicking-a-link\/\">CryptoMix<\/a>&nbsp;is a combination of CryptXXX and CryptoWall ransomware. While it&nbsp;<a href=\"https:\/\/www.techrepublic.com\/article\/the-top-10-worst-ransomware-attacks-of-2017-so-far\/\" target=\"_blank\" rel=\"noreferrer noopener\">has caused issues for users over the years<\/a>, it&#8217;s a relatively low-profile form of file-locking malware that until recently appeared to have fallen off the radar.<\/p>\n\n\n\n<p>However,&nbsp;<a rel=\"noreferrer noopener\" href=\"https:\/\/www.coveware.com\/blog\/cryptomix-ransomware-exploits-cancer-crowdfunding\" target=\"_blank\">researchers at cyber security firm Coveware<\/a>&nbsp;have uncovered a new CryptoMix campaign that looks to make up for its lack of notoriety with this unpleasant new trick.   <br><a href=\"https:\/\/www.google.com\/url?rct=j&amp;sa=t&amp;url=https:\/\/www.zdnet.com\/article\/this-old-ransomware-is-using-an-unpleasant-new-trick-to-try-and-make-you-pay-up\/&amp;ct=ga&amp;cd=CAEYAioUMTcxMjM3MTQzMjM3MzY1MDMzNjcyGmY5NWQ3ZDU3NzU5MmRlMjE6Y29tOmVuOlVT&amp;usg=AFQjCNGvpVUv6HuVt8QS-bbiB1wO83H1zQ\">\ufeffRead more: <\/a> <\/p>\n","protected":false},"excerpt":{"rendered":"<p>An old family of ransomware has returned with a new campaign which uses information about children stolen from crowdfunding websites and claims that payments made in exchange for unlocking encrypted files will be donated to good causes. First spotted in <span class=\"excerpt-dots\">&hellip;<\/span> <a class=\"more-link\" href=\"https:\/\/blog.cyberconservices.com\/index.php\/2019\/01\/22\/old-ransomware-is-using-an-unpleasant-new-trick\/\"><span class=\"more-msg\">Continue reading &rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[636],"tags":[637],"class_list":["post-29285","post","type-post","status-publish","format-standard","hentry","category-ransomware","tag-ransomware"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack-related-posts":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/posts\/29285","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/comments?post=29285"}],"version-history":[{"count":0,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/posts\/29285\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/media?parent=29285"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/categories?post=29285"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/tags?post=29285"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}