06-10-26, 02:45 AM
I sell a version of the ransomware associated with the Lazarus Group. We only accept XMR.
This ransomware is designed to spread like a worm across the entire local network from an infected computer, while exfiltrating all data to the attacker's machine.
It disguises itself as a legitimate PDF and, once the encryption is released, it is designed to leave no traces behind. It automatically clears logs and other potentially incriminating traces. It is also configured to route traffic through Cloudflare in an attempt to make the attack appear to originate from countries such as Russia or North Korea.
This ransomware is designed to spread like a worm across the entire local network from an infected computer, while exfiltrating all data to the attacker's machine.
It disguises itself as a legitimate PDF and, once the encryption is released, it is designed to leave no traces behind. It automatically clears logs and other potentially incriminating traces. It is also configured to route traffic through Cloudflare in an attempt to make the attack appear to originate from countries such as Russia or North Korea.