New Money Message Ransomware Attacks Both Windows & Linux Users

Cyble Analysis and Intelligence Labs (CRIL) stumbled on a new ransomware neighborhood referred to as Money Message. Every Windows and Linux working methods are focused by this ransomware, which will encrypt community shares. Consultants factor in that probability actors might perhaps additionally merely consume stealer logs of their operations.

Greater than 5 victims publicly identified as having been impacted by Money Message, the bulk of whom are American citizens, have already been reported since it became as soon as first observed in March 2023.

Industries represented by the victims embody BFSI, transportation and logistics, and legit products and companies.

Specifics of the New Money Message Ransomware Attacks

The group targets its victims the usage of a double extortion manner that entails exfiltrating the sufferer’s recordsdata sooner than encrypting it. The neighborhood posts the solutions on their leaked web page if the ransom is unpaid.

The Elliptic Curve Diffie-Hellman (ECDH) key change and ChaCha trot cipher algorithm are vulnerable by the Money message ransomware to encrypt recordsdata on a sufferer’s Computer and seek recordsdata from a ransom for its originate.

Researchers mentioned that, enjoy other ransomware groups, this ransomware doesn’t rename the file after encryption.

“This ransomware fetches the base64 encoded ransom existing from the configuration after which decodes it. It creates a file named money_message.log for writing the ransom existing. This existing contains the instructions given by the TA”, explains CRIL researchers.

Once the ransomware has gained access to the community the usage of admin authentication credentials, the ransomware begins encrypting recordsdata within the community shares.

“Money Message is in a position to encrypting community shares, and its potential to target community shares resembles that of the Maze and Petya ransomware,” researchers.

Important Precautions to Prevent Ransomware Attacks

• Preserve consistent backup procedures and store those backups offline or on a special community.
• Wherever conceivable, enable automated utility updates for your devices.
• Your linked devices, much like your PC, laptop laptop, and mobile, consume a revered anti-virus and Web security utility kit.
• Again remote from clicking suspicious links and opening electronic mail attachments without checking their legitimacy.

Related Learn:

• Ransomware Teams Attacking Satellite and Place Industry
• Royal Ransomware Made Upto $11 Million USD The usage of Personalized-Made Encryption Malware
• Dish Network Hacked – Ransomware Assault Causes Multi-Day Outage
• The City of Oakland Centered by Ransomware Assault – Severity Unknown