The Singapore Police and the Cyber Security Agency (CSA) would like to warn the public about a ransomware version known as “Magniber,” which is delivered via false Windows OS updates and results in the encryption of data on the victims’ devices (s).
Ransomware is a form of virus that encrypts files on a system and demands a ransom payment to recover the files. In recent weeks, the Police and CSA have received reports of victims’ data being encrypted with the “Magniber” ransomware after they downloaded and executed malware disguised as Windows OS updates. If the victims sought to recover access to their data, a ransom letter would be presented demanding payment in the form of cryptocurrency such as Bitcoin.
Early reports of the “Magniber” ransomware version revealed that the ransomware was spreading via Internet Explorer vulnerabilities. It began to spread over other Internet browsers such as Microsoft Edge and Chrome in late 2021 to early 2022. According to sources, the ransomware might be disseminated through websites that sell pirated or cracked software, i.e. warez and cracked sites. Inadvertently downloading and installing such software may expose victims to the following risks:
- Encryption of users’ data and demand for ransom to decrypt the data;
- Theft and subsequent misuse of personal data such as details of their bank accounts / credit cards, social media accounts, photos and videos stored in devices. Attackers can also use such data to access the victims’ financial and social media accounts to steal money and/or impersonate victims to commit credit card frauds, scams and extortion using information such as the photos and videos obtained;
- Allowing attackers to gain remote control of their devices, resulting in the loss of data and/or control over devices; and
- Slowdown of the devices’ performance due to possible unauthorised processes invoked by the malware infection (e.g. crypto-jacking).
How it looks like
