Checks are then made for the presence of virtual machines or antivirus software before a recent Flash exploit, CVE-2015-0311, and an older IE exploit, CVE-2013-2551, are dropped. The clip itself makes calls to JavaScript and creates an iframe within, which leads to Angler. Instead of a typical iframe redirection, the team says the Flash clip is wrapped in a tag, potentially in an attempt to avoid detection. In addition, the URL which hosts the malicious Flash file keeps changing. The Wordpress-based website is still serving malware, and it is not known whether the site has fallen prey to a WP exploit. Be aware of the ongoing cyber threats and follow basic computing hygiene to protect yourself from being a victim of.

These programs scan your device for malware and block them. The malware, which impacts data files for over 20 games, is distributed from a compromised website which redirects visitors to the Angler exploit kit by using a Flash clip.Īt the time of writing the website has not been revealed, as Bromium Labs researchers have notified the owner but are yet to receive a response. Use a strong security program: Always use a powerful and strong security program to detect and safeguard your device from malicious malware like CryptoLocker Ransomware. On Thursday, Bromium Labs security researchers revealed the existence of new crypto-ransomware which is targeting gamers by making them pay to unlock what they already own.

Users compromised by crypto locker