This ransomware looks to make the world a better place

Date:
Wed, 25 May 2022 19:37:16 +0000

Description:
If you want your decryption key, you need to feed the poor, buy them
blankets, and pay for their healthcare.

FULL STORY ======================================================================

A yet unknown threat actor wants to be the Robin Hood of the cyber-era,
albeit with a twist. Instead of stealing from the rich and giving to the
poor, this group forces the poor to give directly to the rich - by holding their precious data hostage until they do.

Cybersecurity researchers from CloudSEK recently discovered a ransomware strain named GoodWill that still infects companies, but instead of asking for payment, its asking for acts of goodwill against those less fortunate, all of which need to be documented and presented both publicly, and to the threat actor itself.

Share your thoughts on Cybersecurity and get a free copy of the Hacker's Manual 2022 . Help us find how businesses are preparing for the post-Covid world and the implications of these activities on their cybersecurity plans. Enter your email at the end of this survey to get the bookazine, worth $10.99/10.99. Helping the poor

Once a company gets infected with GoodWill, it needs to do three things: Provide homeless people found on the side of the road with new clothes and warm blankets. The victim must also document the act with photos and videos, add them to the photo frame provided by the attackers, and then share on
their social media (Facebook/Instagram/WhatsApp). Screenshots of those posts, together with the links, need to be sent back to the attackers, in order to receive the second assignment: Buy food for poor children. In the evening, five poor kids need to be taken down to their favorite fast food restaurant and allowed to order whatever they can. The steps for this task are the same
- document, post online, share with the attackers. Finally, step number
three: Go to the nearest hospital and pay for someones treatment. Read more

Most ransomware victims pay up, but many never recover their data

This spiteful new ransomware strain is even more dangerous than usual

Ransomware a burgeoning geopolitical weapon?

After all these things, the victims need to write a beautiful article about their deeds, and discuss how suffering an attack at the hands of GoodWill turned them into kind human beings. Once the threat actor verifies all was done as requested, the victims will receive the decryption key.

The researchers seemingly tracked the attackers to India, and although it cannot be absolutely certain, suspects this is the same malware group that operates the HiddenTear ransomware. Stay safe from cyber-threats with the
best firewalls around

Via: Neowin



======================================================================
Link to news story: https://www.techradar.com/news/this-ransomware-looks-to-make-the-world-a-bette r-place/


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)