Spora, ransomware; That infects every time more computers

A ransomware is a virus type that prevents access to certain parts or files of the infected system, and asks for a ransom (money) in exchange for removing this restriction.

What is it and what does it do?

• Some ransomware encrypts operating system files by disabling the device and coercing the user to pay for the rescue.
• Spora, a dangerous ransomware detected in early January by Russian users, began to spread throughout the world
• The first signs of spora, were made in forums of Bleeping Computer and Kaspersky.
• The malware is spread by email, pretending to be a message billing some service.
• The mails had a ZIP file with an HTA file, which is an HTML application and in addition to using double extension, such as PDF.HTA or DOC.HTA,
• The infection occurs after running the ZIP file, it displays a damaged DOC file as a distraction while encrypting the files.
• Spora, does not connect to the internet, generating a different key for each computer.
• It is only responsible for encrypting Excel, Word, images, compressed files or backups. Once the process is finished, the screen with the instructions to solve the problem is displayed.
• Started in Russia, but has expanded to masasíses, Austria, Netherlands, Japan. Is believed to start infecting other countries.
  
  image1
  image2