.nl is on the same ns as previous payment pages, wouldn't be surprised if the new pair I see are the new payment sites..
Active WildFire Locker (~Zyklon) ransomware campaign:
#WildFire #ransomware
Sample: https://virustotal.com/en/file/02b43ac4df2a415e7b4c2fb2313042cc997e7232fbcbc817db5dea609c629880/analysis/1467986909/ …pic.twitter.com/MtUDcWqQXx
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Same crypter and obfuscation as for previous samples. cc
@BleepinComputer@demonslay335@DanielGallagher@Seifreed@JAMESWT_MHTThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@BleepinComputer@demonslay335@DanielGallagher@Seifreed Campaign ID is the same, but 2 new domains.pic.twitter.com/3nalHlyx7l
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.