Show this thread
Defender ransomware. Attempts to impersonate Windows Defender and appends .defender extension. https://www.reverse.it/sample/b53d1e4ee599677b1ecdc1a16b51b8e2a59670772aebe95e4af689af61fd0c60?environmentId=120 …pic.twitter.com/sxhQxxoqAY
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Well, they are actually right about it being not decryptable. Especially since they never store the damn key. Note is downloaded from
@zippyshare, that's interesting.pic.twitter.com/OHqJmyA44q
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Corny lmao
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
BlackRuby was abusing windows defender too.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
added in my Digest as Defender Ransomware https://id-ransomware.blogspot.ru/2018/02/defender-ransomware.html …
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
This Tweet is unavailable.
-
None. The version information is simply spoofed.
End of conversation
-
-
-
The REAL
#WindowsDefenderAV generically blocks the very limited instances of this ransomware.Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.