A ransomware out now is spoofing as if they are coming from business class multifunction printers (MFPs), Sharp is the main brand mentioned in the article and Comodo is highlighted in the article for discovering it.

​

Per the article:

 

“Emails part of the campaign use a popular printer model in the subject line to trick users into thinking the messages are legitimate. One such message reads, “Scanned image from M-2600N”. MX-2600N is the model of a leading enterprise-class Sharp multifunction printer. Messages contained malicious JavaScript attachments that if clicked on initiated a dropper program that downloaded the IKARUSdilapidated ransomware.”

 

“According to an analysis of the botnet used in the attacks, 54,048 IP addresses were used in the “scanned image” campaign – 27 percent of those were also used in the original attack that began on Aug. 9.”

 

Most attacks have been targeted to European nations. The United States hasn’t been the main focus..yet.

​

WHAT CAN YOU DO?  Be alert. If you did not scan a document and send it to yourself, don't open it! Don't open any suspect email attachments. 

Keep your antivirus software up to date.  

 

The full article can be read at:

https://threatpost.com/new-locky-variant-ikarusdilapidated-strikes-again/127726/

​

What is ransomware?    

It is a type of malicious software that threatens to publish the victim's data or blocks access to it until a ransom is paid.