Jaff - Newest Ransomware Enters the Fray

  • skeeved's picture
  • Posted on: 12 May 2017
  • By: skeeved

The newest ransomware malware threat has begun appearing as massive numbers of emails spew from the Necurs botnet.

Jaff is currently being sent as a PDF attachment with an embedded Microsoft Word document. The Word document is launched when the PDF is opened by a JavaScript script in the PDF. Once the Word document is opened, a VBScript script is executed which begins the malware download.

As is usual with email distributed malware, end-user education goes a long way toward stopping this threat in it's tracks. There are a lot of hoops to jump through to become infected.