Urausy improving its localization - A (the\?) Gaelic Ransomware with Interpol impersonation as default landing
Appearance
(Publication) Google search: [1]
| Urausy improving its localization - A (the\?) Gaelic Ransomware with Interpol impersonation as default landing | |
|---|---|
| Botnet | Urausy |
| Malware | |
| Botnet/malware group | |
| Exploit kits | |
| Services | |
| Feature | |
| Distribution vector | |
| Target | |
| Origin | |
| Campaign | |
| Operation/Working group | |
| Vulnerability | |
| CCProtocol | |
| Date | 2012 / 2012-09-15 |
| Editor/Conference | Blogspot |
| Link | http://malware.dontneedcoffee.com/2012/09/UrausyGaelicInterpol.html (Archive copy) |
| Author | Kafeine |
| Type | |
Abstract
“ Urausy first appear at the end of July. It was just another Reveton "Me too" with a yellow square filled with a # instead of the "Camera" and targetting few countries : DE, ES, FR, UK, US (PT? see at the end)
Based on what i was able to see of the distribution, I had the feeling at that time, that it was a Reveton distributor trying to run his own business.
Bibtex
@misc{Kafeine2012BFR1225,
editor = {Blogspot},
author = {Kafeine},
title = {Urausy improving its localization - A (the\?) Gaelic Ransomware with Interpol impersonation as default landing},
date = {15},
month = Sep,
year = {2012},
howpublished = {\url{http://malware.dontneedcoffee.com/2012/09/UrausyGaelicInterpol.html}},
}