View source for REVETON Ransomware Spreads with Old Tactics, New Infection Method

{{Publication
|Botnet=Reveton,
|Year=2014
|Date=2014-12-11
|Editor=Trend Labs
|Link=http://blog.trendmicro.com/trendlabs-security-intelligence/reveton-ransomware-spreads-with-old-tactics-new-infection-method/
|Author=Alvin Bacani, David Sancho, Jamz Yaneza,
|Type=Blogpost
|Abstract=Similar to older REVETON or police ransomware variants, the recent wave of REVETON malware variants detected as TROJ_REVETON.SM4 and TROJ_REVETON.SM6 are both equipped with the capability to lock the screen of the affected users’ systems.

Its behavior rings similar to previous REVETON variants, which threaten users that they need to pay their local police a fine. In these new samples, the REVETON malware displays “warning” messages from the Homeland Security National Cyber Security Division and the ICE Cyber Crime Center informing users that their computer has been blocked for the reason that “the work of your (the user’s) computer has been suspended on the grounds of unauthorized cyber activity.”
}}