Windows users, beware!
The subject of the email says Install Latest Microsoft Update now!
or Critical Microsoft Windows Update!
This in turn downloaded a second executable file hosted on the Microsoft-owned GitHub.
It is contained under its btcgenerator repository.
Just like the attachment, this is .NET compiled malware, the Cyborg ransomware.
When the researchers searched for the ransomwares original filename they obtained and looked for it in VirusTotal.
They found three other samples and discovered that a builder for the ransomware exists online.
The GitHub account Cyborg-Ransomware was newly created too.
It contains two repositories: Cyborg-Builder-Ransomware, and Cyborg-Russian-version, Lopera wrote.
It can be spammed using other themes and be attached in different forms to evade email gateways.
Further, it is recommended that users who receive similar emails delete them right away.
Also, it is advisable not to open any email attachments or links from unknown or untrusted sources.
source: www.techworm.net
