View source for Dharma Ransomware Uses AV Tool to Distract from Malicious Activities

{{Publication
|Botnet=Dharma,
|Group=Ransomware,
|Year=2019
|Date=2019-05-08
|Editor=TrendLabs Security Intelligence Blog
|Link=https://blog.trendmicro.com/trendlabs-security-intelligence/dharma-ransomware-uses-av-tool-to-distract-from-malicious-activities/
|Author=Raphael Centeno,
|Type=Blogpost
|Abstract=The Dharma ransomware has been around since 2016, but it has continued to target and successfully victimize users and organizations around the world. One high profile attack happened in November 2018 when the ransomware infected a hospital in Texas, encrypting many of their stored records; luckily the hospital was able to recover from the attack without paying the ransom. Trend Micro recently found new samples of Dharma ransomware using a new technique: using software installation as a distraction to help hide malicious activities.
}}