Rewterz Threat Alert – STOP Ransomware has a New Feature – Azorult

Severity

Medium

Analysis Summary

STOP Ransomware was observed distributing DJVU ransomware in January for its malicious components and now installs the Azorult trojan to harvest data. STOP ransomware will download malicious extensions to encrypt the files installed in a victim’s computer. The ransomware will upload the target systems encrypted files on the attackers C&C server.

Impact

• STOP Ransomware
• Loss of credentials

Indicators of Compromise

Remediation

• Block threat indicators at your respective controls
• Do not click on any attachments/links sent  by unknown senders
• Always be suspicious about the emails being sent from unknown senders