some of friends ask me that they receive the .svg file on fb messenger
so let me give you the description of that "Locky Ransomware" that is bind-ed with .svg file
what is .svg
Scalable Vector Graphics (SVG) is an XML-based vector image format for two-dimensional graphics with support for interactivity and animation. The SVG specification is an open standard developed by the World Wide Web Consortium (W3C) since 1999.
This means, more specifically, that you can embed any content you want (such as JavaScript)*** Moreover, any modern browser will therefore able to open this file
here is a code of that .svg file
//Only for Educational Purpose
http://pastebin.com/RDHb3mZF
What actually does this Locky Ransomware
It's a heavily obfuscated script, which, after opening, redirects you to the following website
http://www.kerman.pw/?fb_dsa
A website purporting to be Youtube, including a video from Facebook - of course, you'll need to install an additional extension to view it
The extension has no icon and thus seems invisible and has the Permissions to read and change all the data on the site you visit
This Was a tut that how to create a "Locky Ransomware"
now here is the tips that how to be safe from this virus
Removal
Remove the malicious extension from your browser immediately:
Additionally, run a scan with your antivirus and change your Facebook password afterwards***
Notify your friends you sent a malicious file, or in the other case, let your friend know he/she is infected. If you keep receiving the same message from your friend, you may want to temporarily block their messages***
so let me give you the description of that "Locky Ransomware" that is bind-ed with .svg file
what is .svg
Scalable Vector Graphics (SVG) is an XML-based vector image format for two-dimensional graphics with support for interactivity and animation. The SVG specification is an open standard developed by the World Wide Web Consortium (W3C) since 1999.
This means, more specifically, that you can embed any content you want (such as JavaScript)*** Moreover, any modern browser will therefore able to open this file
here is a code of that .svg file
//Only for Educational Purpose
http://pastebin.com/RDHb3mZF
What actually does this Locky Ransomware
It's a heavily obfuscated script, which, after opening, redirects you to the following website
http://www.kerman.pw/?fb_dsa
A website purporting to be Youtube, including a video from Facebook - of course, you'll need to install an additional extension to view it
The extension has no icon and thus seems invisible and has the Permissions to read and change all the data on the site you visit
This Was a tut that how to create a "Locky Ransomware"
now here is the tips that how to be safe from this virus
Removal
Remove the malicious extension from your browser immediately:
Additionally, run a scan with your antivirus and change your Facebook password afterwards***
Notify your friends you sent a malicious file, or in the other case, let your friend know he/she is infected. If you keep receiving the same message from your friend, you may want to temporarily block their messages***
Mess With The Best
Die Like The Rest
0 comments :
Post a Comment