Magniber Ransomware’s Relaunch Technique

ASEC (AhnLab Security Emergency Response Center) has been constantly monitoring the Magniber ransomware which has been displaying a high number of distribution cases. It has been distributed through the IE (Internet Explorer) vulnerability for the past few years, but stopped exploiting the vulnerability after the support for the browser ended. Recently, the ransomware is distributed as a Windows installer package file (.msi) in Edge and Chrome browsers.

There have been recent reports of systems being reinfected by Magniber. Analysis revealed …

ahnlab asec browser browsers cases center chrome distributed distribution edge emergency exploiting explorer high installer internet internet explorer magniber malware analysis monitoring msi package ransomware reports response security support systems vulnerability windows