author photo
By SecureWorld News Team
Tue | Oct 24, 2017 | 10:29 AM PDT

The new strain of ransomware is called "Bad Rabbit" and it appears to have started in one eastern European country and has now spread to at least four that we know about: Russia, Ukraine, Turkey, and Bulgaria. 

Security researcher Lukas Stefanko, and security firm ESET, are citing a fake Adobe Flash download using the well known Eternal Blue exploit.

The ransomware owners demand .05 bitcoin to unlock your system that they have encrypted. That's about $280 as of the second we're writing this story.

Game of Thrones dragons have role in Bad Rabbit ransomware

One security researcher points out that the tasks created by the Bad Rabbit ransomware are named after two dragons from the popular "Game of Thrones" series. So the creators or purchasers of this variant must be GoT fans. Take a look at the screenshot:

Security company KnowBe4 told customers this one basically bricks the workstation: "As for Bad Rabbit, the ransomware is a so-called disk coder, similar to Petya and NotPetya. Bad Rabbit first encrypts files on the user's computer and then replaces the MBR (Master Boot Record)."

Now the multi-million dollar question which looms large today: Will this ransomware spread around the globe the way WannaCry and NotPetya did? SecureWorld is following this story.

For the latest in cybersecurity news, follow SecureWorld on LinkedInTwitter, or Facebook.

Comments