A new variant of the KeyPass ransomware has been gaining traction in August and is using new techniques like manual control to customize its encryption process, researchers said Monday.
Researchers at Kaspersky Lab who posted about the trojan said that it is being propagated by means of fake installers that download the ransomware module.
“According to our statistics, the criminals have begun spreading the ransomware only a few days ago,” Orkhan Mamedov, malware analyst at Kaspersky Lab, told Threatpost today. “The information contained in the executable PE header confirms the assumption that the trojan was created recently.”
