There is a new ransomware attack that is spreading across Europe and into other countries around the world. This new cyber-attack, known as 'Bad Rabbit', disguises itself as an Adobe Flash Update in order to convince online users into downloading it. Once downloaded and installed, the ransomware quickly hijacks the victims' computers, encrypts their personal files and data (make them unreadable), and demands a ransom payment in order to decrypt or make them readable again.
The "Bad Rabbit" Ransomware
What is a Ransomware?
Ransomware is a type of malicious software that threatens to publish the victim's data or block access to it unless a ransom is paid.
How Bad Rabbit Infects Computers?
Bad Rabbit mainly spreads or infect computers via drive-by downloads on hacked websites. This technique involves cybercriminals tricking online users into visiting a malicious website, usually one that has been hacked, and tells the online users they need to install a Flash Update. But, any attempts to install the fake and malicious Flash Update will result in the online users' computers getting infected.
Remember, only install Flash Updates on Adobe's website at the following link:
Never install Flash Updates on your computer from websites that claim you need to do so because your Flash Player is outdated or you need it to watch a video or play a game.
Bad Rabbit comes with a potent trick up its sleeve in that it contains an SMB component which allows it to move laterally across an infected network and propagate or spread without user interaction. Kaspersky Lab, a cybersecurity and anti-virus provider, says users can block the execution of the following files in order to prevent infection:
- "C:\windows\infpub.dat"
- "C:\windows\cscc.dat"