Posts tagged Cerber

Cerber targets Windows OS and is distributed via malvertising delivered by the Nuclear Exploit Kit. Some reports suggest that it is also being sold in the Russian underground market as “Ransomware-as-a-Service” (RaaS). When this infection first occurs, Cerber determines the location of the victim. If the victim resides outside the list of “protected” countries, Cerber installs itself in the %AppData%\{2ED2A2FE-872C-D4A0-17AC-E301404F1CBA}\ folder and names itself after a random Windows executable.

Read More