Port 22

Account With Admin Privileges Abused to Install BitPaymer Ransomware via PsExec

Ransomware may have experienced a decline in 2018, but it seems to be getting back on track only this time, attacks are looking to be more targeted. Coming on the heels of news about a ransomware attack against a U.S. beverage company which addressed the company by name in the ransom note, this blog post looks into a BitPaymer ransomware variant (detected by Trend Micro as Ransom.Win32.BITPAYMER.TGACAJ) that hit a U.S. manufacturing company.

The post Account With Admin Privileges Abused to Install BitPaymer Ransomware via PsExec appeared first on .