Add Nemty Ransomware

2019-08-31 21:08:50 +02:00 · 2019-08-31 21:08:50 +02:00 · e79310c861
parent de9cc6898a
commit e79310c861
1 changed files with 13 additions and 1 deletions
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@ -13472,7 +13472,19 @@
      },
      "uuid": "6cfa553a-1e1b-115a-401f-015d681470b1",
      "value": "GetCrypt"
+    },
+    {
+      "description": "A new ransomware family dubbed “Nemty” for the extension it adds to encrypted files has recently surfaced in the wild. According to a report from Bleeping Computer, New York-based reverse engineer Vitali Kremez posits that Nemty is possibly delivered through exposed remote desktop connections.",
+      "meta": {
+        "payment-method": "Bitcoin",
+        "price": "1000 $",
+        "refs": [
+          "https://www.trendmicro.com/vinfo/us/security/news/cyber-attacks/nemty-ransomware-possibly-spreads-through-exposed-remote-desktop-connections"
+        ]
+      },
+      "uuid": "6cfa554a-1e2b-115a-400f-014d671470b1",
+      "value": "Nemty"
    }
  ],
-  "version": 64
+  "version": 65
 }