1. Symantec/
  2. Security Response/
  3. Attack Signatures/
  4. Attack: Ransom.BadRabbit Activity

Attack: Ransom.BadRabbit Activity

Severity: High

This attack could pose a serious security threat. You should take immediate action to stop any damage or prevent further damage from happening.

Description

This signature detects Ransom.BadRabbit activity on the infected machine.

Additional Information

Ransom.BadRabbit is a Trojan horse that encrypts files on the compromised computer. It then asks the user to pay to have their files decrypted.

Affected

  • Various Windows platforms.

Response


  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube