EITest campaign HolflerText popup sends Mole ransomware
released on 2017-07-24 @ 01:48:33 PM
The last time I saw the HoelferText popup, it was sending Spora ransomware (link), but now it's Mole ransomware.
At this point, we're only seeing tech support scams and HoeflerText popups from the EITest campaign.
For more information, see information on the EITest campaign in the Unit 42 blog titled: Decline in Rig Exploit Kit.