Virus Matrix asks for rescue in cryptocurrencies

The ransomware has been active since 2016, but has improved its ability to infect computers. Currently it is introduced through remote access, and then ask for a ransom for an amount starting at 2,500 dollars

Sophos Lab cybersecurity specialists detected new versions of the Matrix ransomware, created in 2016, that is introduced into the computers through remote action tools.

Once on the computers, the malicious software establishes access restrictions to certain files connected to the network. To release them, it asks for a ransom for 2,500 dollars in cryptocurrencies (equivalent to 2,180 euros) through an email message to the user.

According to the specialists of the cybersecurity company, “Matrix has been active since 2016, although changing its attack parameters, and adding new files to deploy different tasks and useful payloads in the network”.

Sophos Lab has confirmed that the ransomware enters the computers through a weak remote desktop protocol password (RDP) that is integrated into Windows and thus passes to devices connected to the Internet.

After blocking access to infected files, those responsible for this attack communicate with the user by email and request a ransom that initially is $ 2,500 in crypto assets, although this amount may be lower.

Among the security recommendations of the Sophos Lab team is “to restrict access to remote control applications, perform vulnerability analysis and penetration tests on a regular basis.” Also, advises making multifactor authentication for sensitive internal systems, creating offline backups and offsite, and develop an information recovery plan that covers the restoration of data and systems for entire organizations.”

M.Pino

Source: ABC

Receive this and all our information directly on your cell phone through our channel on Telegram:https://t.me/BitFinanceNews

You might also like