A new analysis of Locky ransomware configurations by IT security firm Avira has revealed improved offline capabilities that enhance its ability to automatically encrypt victims' files, without interaction with a command-and-control server.
Details of the attack are still blurry, attackers appear to be using malicious links designed to appeal to users monitoring the evolution of the Bitcoin prices.
The "high-profile incidents you've read about" in media reports were conducted using simple methods, including spear phishing schemes or USB drive delivery, an NSA official said.
Forcepoint has come across a new trojan downloader called Quant Loader that has been spotted distributing Locky Zepto crypto-ransomware and Pony malware.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.