The Long Run of Shade Ransomware
Security Affairs
FEBRUARY 19, 2019
Technical analysis. The phishing email contains a.zip file named “slavneft.zakaz.zip”, which means something like “slavneft order” in English, showing a direct reference to “Slavneft”. The behavioural analysis session recorded the executions of the ZCash miner, stored in the “C:ProgramDataSoftwareDistribution” folder.
Let's personalize your content