New Family of Ransom Locker Found, Uses TOR Hidden Service
released on 2016-03-21 @ 08:59:58 PM
On March 9 2016, Cyphort Labs discovered an infection on a porn site keng94(dot)com redirecting visitors to an exploit kit and installing a Ransom Locker. The site is redirecting users to rg(dot)foldersasap(dot)com which is a RIG EK landing page that serves a malicious flash file and a malicious binary.