A new ransomware Trojan has been detected that pretends to be Kaspersky Lab anti-virus
VirusInfo warns of the active distribution of a new kind of malware related to the type of Trojan ransomware - Trojan-Ransom.Win32.SMSer
Currently, 6 varieties of this trojan are circulating in the Russian Internet sector.
Malicious software blocks the normal operation of the PC and prompts the user to send a paid SMS message to restore functionality, which is a typical behavior of Trojan ransomware. The peculiarity of this sample is that it tries to impersonate a non-existent “online anti-virus of Kaspersky Lab”, which has detected a “virus” on the user's computer and offers to “delete” it. At the same time, as can be seen from the screenshot above, the text is illiterate and contains both spelling and punctuation errors.
A detailed description of the trojan and the method of treating an infected PC in a detailed article on Virusinfo.info - Trojan-Ransom.Win32.SMSer: a ransomware posing as Kaspersky Lab’s antivirus
Currently, 6 varieties of this trojan are circulating in the Russian Internet sector.
Malicious software blocks the normal operation of the PC and prompts the user to send a paid SMS message to restore functionality, which is a typical behavior of Trojan ransomware. The peculiarity of this sample is that it tries to impersonate a non-existent “online anti-virus of Kaspersky Lab”, which has detected a “virus” on the user's computer and offers to “delete” it. At the same time, as can be seen from the screenshot above, the text is illiterate and contains both spelling and punctuation errors.
A detailed description of the trojan and the method of treating an infected PC in a detailed article on Virusinfo.info - Trojan-Ransom.Win32.SMSer: a ransomware posing as Kaspersky Lab’s antivirus