author photo
By SecureWorld News Team
Mon | Oct 16, 2017 | 1:46 PM PDT

There are so many types of ransomware in the wild, it can be tough to remember them all.

But this one is a standout and security researchers believe it is a first of its kind.

Based off a known banking trojan but advancing in capability, this one is called DoubeLocker.

ESET researchers named it DoubleLocker because it "Can change the device’s PIN, preventing victims from accessing their devices, and also encrypts the data it finds in them – a combination that has not been seen previously in the Android ecosystem."

If you watch the video,  it's clear that DoubleLocker spreads the same way its banking parent does. It is distributed mostly as a fake Adobe Flash Player through compromised websites.

 

 

This also means Equifax got lucky its website was only re-directing to adware.

Can you imagine the fallout if the company's usage of Flash Player on its website was a path to ransomware, instead?

 

Comments