Jaff - Newest Ransomware Enters the Fray

  • skeeved's picture
  • Posted on: 12 May 2017
  • By: skeeved

The newest ransomware malware threat has begun appearing as massive numbers of emails spew from the Necurs botnet.

Jaff is currently being sent as a PDF attachment with an embedded Microsoft Word document. The Word document is launched when the PDF is opened by a JavaScript script in the PDF. Once the Word document is opened, a VBScript script is executed which begins the malware download.

As is usual with email distributed malware, end-user education goes a long way toward stopping this threat in it's tracks. There are a lot of hoops to jump through to become infected.

http://blog.talosintelligence.com/2017/05/jaff-ransomware.html#more
https://www.theregister.co.uk/2017/05/12/jaff_ransomware/
https://blogs.forcepoint.com/security-labs/jaff-enters-ransomware-scene-...