{"id":12268,"date":"2016-06-02T12:16:49","date_gmt":"2016-06-02T16:16:49","guid":{"rendered":"https:\/\/www.kaspersky.com\/blog\/?p=12268"},"modified":"2017-09-24T07:37:16","modified_gmt":"2017-09-24T11:37:16","slug":"zcryptor-ransomware","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com\/blog\/zcryptor-ransomware\/12268\/","title":{"rendered":"ZCryptor: The conqueror worm"},"content":{"rendered":"

Analysts and researchers agree that 2016 is the year when ransomware went really big. Cybercrooks didn\u2019t need much time to see the potential value of cryptolockers, and they readily added ransomware to their arsenals. To give you an idea of the profitability, Cisco researchers reported in 2015<\/a> that a single Angler exploit kit<\/a> brings cybercriminals profits of up to $60 million annually, or on average $5 million every month!<\/p>\n

\"ZCryptor:<\/a><\/p>\n

The usual suspects of the modern ransomware market \u2014 Petya<\/a> and his friend Mischa<\/a>, as well as their distant relative, Locky \u2014 currently prey on users in more than 100 countries. Hackers recently started focusing more attention on enterprises and organizations in possession of valuable data: Lately, a number of US hospitals became victims of ransomware attacks<\/a>.<\/p>\n

The rise of cryptoworms<\/h3>\n

In their attempts to get as much money as possible, as soon as possible, cybercriminals seek ways to expand their attacks so they can further propagate their lockers. Malicious spam campaigns still work, but they are not as efficient as before; with cyberthreats getting coverage in the media, users are becoming more savvy and getting to know the most frequently used tricks.<\/p>\n

In another important development, Web browsers and antiviruses have learned to detect and block malicious URLs or malware-laced spam. In response, hackers have gradually phased out their usual \u201ccarpet bombing\u201d approach to malware distribution. Increasingly, they are turning to methods used long ago in the most widespread and efficient campaigns: good ol\u2019 worms<\/a>.<\/p>\n

\n

Meet the #cryptoworm<\/a>\u2026 the future of #ransomware<\/a> via @zpring<\/a> @threatpost<\/a> https:\/\/t.co\/zndtXFulGB<\/a> pic.twitter.com\/BYRjQG8X7j<\/a><\/p>\n

\u2014 Kaspersky (@kaspersky) April 12, 2016<\/a><\/p><\/blockquote>\n