GandCrab is a form of encrypting ransomware malware first discovered in January 2018, which demands payment in DASH cryptocurrency.
History edit
The first version of GandCrab was first discovered at the end of January 2018[1]: 155 . In February, Bitdefender released a decryption tool to recover files that were encrypted by the first version of GandCrab. By the end of February, more than seven subversions were found[2]. On March 6, version 2 was detected, which used new extensions[1]: 155 .
On June 1, 2019, the creators of GandCrab announced that they were shutting down their operation and delete all decryption keys[3]. On 17 June 2019, FBI released a decryption tool for all versions of GandCrab[4].
Impact edit
GandCrab is distributed via spam emails, exploit kits as well as some other spreading vectors[5]. GrandSoft and RIG are most commonly used for distributing[6]. As of June 2019, GandCrab has affected more than 1.5 million computers[7].
References edit
- ^ a b Lemmou, Yassine; Souidi, El Mamoun (2018). "Inside GandCrab Ransomware". Cryptology and Network Security. Cham: Springer International Publishing. doi:10.1007/978-3-030-00434-7_8. ISBN 978-3-030-00433-0. ISSN 0302-9743.
- ^ Abrams, Lawrence (February 28, 2018). "EITest HoeflerText Scam Distributing GandCrab & Netsupport Manager". BleepingComputer. Retrieved October 20, 2019.
- ^ Cimpanu, Catalin (June 1, 2019). "GandCrab ransomware operation says it's shutting down". ZDNet. Retrieved October 20, 2019.
- ^ Abrams, Lawrence (July 16, 2019). "FBI Releases Master Decryption Keys for GandCrab Ransomware". BleepingComputer. Retrieved October 20, 2019.
- ^ "The GandCrab Ransomware Mindset". Check Point Research. March 13, 2018. Retrieved April 11, 2019.
- ^ "GandCrab ransomware distributed by RIG and GrandSoft exploit kits". Information Security Newspaper. January 31, 2018. Retrieved October 20, 2019.
- ^ "GandCrab Ransomware Decryption Tool [All Versions]". The Hacker News. Retrieved October 20, 2019.
Category:Hacking in the 2010s Category:Ransomware Category:Cyberattacks Category:Hacking in the 2010s