The operators of the RagnarLocker ransomware are installing the VirtualBox app and running virtual machines on computers they infect in order to run their ransomware in a “safe” environment, outside the reach of local antivirus software. This latest trick has been spotted and detailed today by UK cyber-security firm Sophos and shows the creativity and great lengths some ransomware gangs will go to avoid detection while attacking a victim.
ZDNet.com click the link to read the rest of the story. Get our free tools here.
Have you been hit by ransomware?Join the conversation on our Facebook Page!