"Magniber Ransomware Now Targets Windows 11 Machines"

Magniber ransomware was initially discovered in 2017 and has been recently upgraded to target Windows 11 machines, according to researchers at 360 Total Security.  The researchers stated that the attack volume of the ransomware increased significantly since May 25th, and some of its dissemination package names have been updated, including a 'win10-11_system_upgrade_software.msi' file.  The researchers noted that the ransomware itself hasn't changed much, but the fact that it can now infect multiple versions of Windows operating systems could mean an increase in infections.  Magniber infects machines thanks to an attack vector that looks like a Windows update.  These malicious files are commonly found in downloads from forums, cracked software, and fake websites.  Once downloaded and executed, the ransomware uses the RSA+AES to encrypt files, in which RSA uses 2048 bits.  According to the researchers, every victim is shown an independent payment page where they are asked to pay a ransom of 0.09 Bitcoin (currently $2,848) within five days, or the ransom will be doubled.  If the ransom is not paid within an unspecified amount of time, the link will reportedly become invalid.  The researchers stated that Magniber infected a considerable number of machines earlier this year.  

 

Infosecurity reports: "Magniber Ransomware Now Targets Windows 11 Machines"

Submitted by Anonymous on