RAA Ransomware Written in JScript to Avoid Detection

Security experts have discovered a new type of ransomware written entirely in scripting language JScript – potentially in a bid to avoid detection by traditional filtering tools.

By Phil Muncaster

RAA was first thought to have been written in JavaScript, but this is not the case, according to Trend Micro technical director, Renaud Bidou.

He explained in a lengthy blog post on Monday that the new threat – detected as RANSOM_JSRAA.A – is written in a language designed specifically for Windows systems and executed by the Windows Scripting Host engine only through Internet Explorer (IE), not Edge.

To read the entire article, please click here.

Source: http://www.infosecurity-magazine.com/

Facebooktwittergoogle_plusredditlinkedinmail