Ankura CTIX FLASH Update - August 6, 2024

Malware Activity

Magniber Ransomware Targets Home Users Worldwide

BleepingComputer has reported on a recent uptick in ransomware attacks targeting home users with Magniber ransomware. Magniber ransomware was first launched in 2017, and the operation has ebbed and flowed since then. Historically, Magniber ransomware has been spread through various means such as Windows zero-days and fake Windows and browser updates. In 2018, AhnLab released a decryptor for the ransomware which unfortunately no longer works against later versions of Magniber. As of July 20, 2024, BleepingComputer has observed what they are calling a surge in Magniber ransomware victims seeking help in their forums. It is currently unclear how recent victims are being infected, however some victims have reported running software cracks or key generators prior to the Magniber encryption. Once encrypted, files are appended with a random character extension and a ransom note named "READ_ME.htm" is