Emails sent by cybercriminals using 'GandCrab' have romantic subject lines.
A new round of Phishing emails containing romantic messages has reportedly attempted to quite literally seduce their readers into clicking ransomware-ridden links.
Indeed, the Mimecast Threat Labs Team released a report saying that threat actors behind GandCrab, a ransomware that encrypts its victim’s files, are sending messages with subject lines such as 'This is my love letter to you', 'Wrote my thoughts down about you', 'My letter just for you' and 'Felt in love with you.'
”Felt in Love With You”
The email contains nothing more than an asterisk symbol (*) and an attached zip file. According to the report, each of the zip files is titled “Love_You_2018_” followed by seven or eight random numbers. The unfortunate souls who click the file are then asked if they prefer to see it in English, Chinese, or Korean (an indication that the speakers of these languages are the target victims of the ransomware.)
GandCrab’s victims are then asked to send Bitcoin or DASH cryptocurrency to a wallet address in order to regain access to their files. The victim is told that their ransom will be doubled if it isn’t paid within seven days. Bizarrely, victims who don’t know how to use cryptocurrency can use a sort of live chat window within the ransomware to get help on how to pay the attackers’ demands.
Interestingly, the ransomware can detect Russian victims and will stop the attack on computers who have Russian-configured keyboards. According to Mimecast, “this signals these campaigns are specifically designed to not target Russian users.”
Additionally, GandCrab’s classification as a RaaS means that it’s essentially ransomware for hire: “in a [RaaS] situation, an unprincipled vendor offers hackers and malicious actors a platform tool for the purposes of using ransomware to hold computer files, information or systems hostage,” reads a definition from Techopedia.
The Holidays Are a Busy Time for Cybercriminals
Mimecast’s report also stated that cybercriminals--particularly those that user ransomware--often take advantage of the holidays as a time to pry their way into personal email inboxes.
The holiday season also “[offers] the opportunity for threat actors to harvest a vast amount of information and data that is input into online shopping websites by coming up with fake websites and fake customer surveys that promise to deliver anything from fake vouchers to ‘great deals’ to the victim,” the report said.
Mimecast identified several different kinds of emails and websites in addition to the fake romantic messages, including fake e-greetings, fake online customers surveys, emails offering fake gifts and services, malicious dating apps, and non-malicious dating apps and websites that had been hacked.
A new round of Phishing emails containing romantic messages has reportedly attempted to quite literally seduce their readers into clicking ransomware-ridden links.
Indeed, the Mimecast Threat Labs Team released a report saying that threat actors behind GandCrab, a ransomware that encrypts its victim’s files, are sending messages with subject lines such as 'This is my love letter to you', 'Wrote my thoughts down about you', 'My letter just for you' and 'Felt in love with you.'
”Felt in Love With You”
The email contains nothing more than an asterisk symbol (*) and an attached zip file. According to the report, each of the zip files is titled “Love_You_2018_” followed by seven or eight random numbers. The unfortunate souls who click the file are then asked if they prefer to see it in English, Chinese, or Korean (an indication that the speakers of these languages are the target victims of the ransomware.)
GandCrab’s victims are then asked to send Bitcoin or DASH cryptocurrency to a wallet address in order to regain access to their files. The victim is told that their ransom will be doubled if it isn’t paid within seven days. Bizarrely, victims who don’t know how to use cryptocurrency can use a sort of live chat window within the ransomware to get help on how to pay the attackers’ demands.
Interestingly, the ransomware can detect Russian victims and will stop the attack on computers who have Russian-configured keyboards. According to Mimecast, “this signals these campaigns are specifically designed to not target Russian users.”
Additionally, GandCrab’s classification as a RaaS means that it’s essentially ransomware for hire: “in a [RaaS] situation, an unprincipled vendor offers hackers and malicious actors a platform tool for the purposes of using ransomware to hold computer files, information or systems hostage,” reads a definition from Techopedia.
The Holidays Are a Busy Time for Cybercriminals
Mimecast’s report also stated that cybercriminals--particularly those that user ransomware--often take advantage of the holidays as a time to pry their way into personal email inboxes.
The holiday season also “[offers] the opportunity for threat actors to harvest a vast amount of information and data that is input into online shopping websites by coming up with fake websites and fake customer surveys that promise to deliver anything from fake vouchers to ‘great deals’ to the victim,” the report said.
Mimecast identified several different kinds of emails and websites in addition to the fake romantic messages, including fake e-greetings, fake online customers surveys, emails offering fake gifts and services, malicious dating apps, and non-malicious dating apps and websites that had been hacked.
Rachel is a self-taught crypto geek and a passionate writer. She believes in the power that the written word has to educate, connect and empower individuals to make positive and powerful financial choices. She is the Podcast Host and a Cryptocurrency Editor at Finance Magnates.
‘Bitcoin Jesus’ Arrested in Spain for Evading $48 Million in US Taxes
Network, Learn, Grow | FMAS:24
Network, Learn, Grow | FMAS:24
Get ready to mark your calendars for FMAS:24, returning this May! Take a quick glimpse of what awaits at the Sandton Convention Centre in Sandton, South Africa from May 20-22, 2024.
Don't miss out on this 5-second invite packed with energy and urgency!
Secure your free ticket now 🔗 https://events.financemagnates.com/yQx0l?utm_source=youtube&utm_campaign=fmas-is-back&utm_medium=video&RefId=FMAS24+Video+Ad+%5B1%5D
#fmas24 #fmas #fmevents #financeinafrica #traders #investors #affiliates #forexTraders #investmentOpportunities #B2BNetworking #finTech #Innovations #TradingCommunity #BusinessOpportunities #AfricanBusiness #Johannesburg #southafrica
📣 Stay updated with the latest in finance and trading!
Follow FMevents across our social media platforms for news, insights, and event updates. Connect with us today:
🔗 LinkedIn: https://www.linkedin.com/showcase/financemagnates-events/
👍 Facebook: https://www.facebook.com/FinanceMagnatesEvents
📸 Instagram: https://www.instagram.com/fmevents_official
🐦 Twitter: https://twitter.com/F_M_events
🎥 TikTok: https://www.tiktok.com/@fmevents_official
▶️ YouTube: https://www.youtube.com/@FinanceMagnates_official
Don't miss out on our latest videos, interviews, and event coverage. Subscribe to our YouTube channel for more!
Get ready to mark your calendars for FMAS:24, returning this May! Take a quick glimpse of what awaits at the Sandton Convention Centre in Sandton, South Africa from May 20-22, 2024.
Don't miss out on this 5-second invite packed with energy and urgency!
Secure your free ticket now 🔗 https://events.financemagnates.com/yQx0l?utm_source=youtube&utm_campaign=fmas-is-back&utm_medium=video&RefId=FMAS24+Video+Ad+%5B1%5D
#fmas24 #fmas #fmevents #financeinafrica #traders #investors #affiliates #forexTraders #investmentOpportunities #B2BNetworking #finTech #Innovations #TradingCommunity #BusinessOpportunities #AfricanBusiness #Johannesburg #southafrica
📣 Stay updated with the latest in finance and trading!
Follow FMevents across our social media platforms for news, insights, and event updates. Connect with us today:
🔗 LinkedIn: https://www.linkedin.com/showcase/financemagnates-events/
👍 Facebook: https://www.facebook.com/FinanceMagnatesEvents
📸 Instagram: https://www.instagram.com/fmevents_official
🐦 Twitter: https://twitter.com/F_M_events
🎥 TikTok: https://www.tiktok.com/@fmevents_official
▶️ YouTube: https://www.youtube.com/@FinanceMagnates_official
Don't miss out on our latest videos, interviews, and event coverage. Subscribe to our YouTube channel for more!
Here's a sneak peek into the FMAS:24 vibrant atmosphere! Join us at Africa’s premium financial event for a transformative experience that combines the best of finance and technology.
From May 20-22, 2024, the Sandton Convention Centre in Sandton, South Africa, will be the hub for over 3,500 attendees to engage in unparalleled networking opportunities, learn from over 150 industry-leading speakers, and explore innovations from 120+ exhibitors.
Secure your free ticket now 🔗 https://events.financemagnates.com/yQx0l?utm_source=youtube&utm_campaign=fmas-is-back&utm_medium=video&RefId=FMAS24+Video+Ad+%5B1%5D
#fmas24 #fmas #fmevents #financeinafrica #traders #investors #affiliates #forexTraders #investmentOpportunities #B2BNetworking #finTech #Innovations #TradingCommunity #BusinessOpportunities #AfricanBusiness #Johannesburg #southafrica
📣 Stay updated with the latest in finance and trading!
Follow FMevents across our social media platforms for news, insights, and event updates. Connect with us today:
🔗 LinkedIn: https://www.linkedin.com/showcase/financemagnates-events/
👍 Facebook: https://www.facebook.com/FinanceMagnatesEvents
📸 Instagram: https://www.instagram.com/fmevents_official
🐦 Twitter: https://twitter.com/F_M_events
🎥 TikTok: https://www.tiktok.com/@fmevents_official
▶️ YouTube: https://www.youtube.com/@FinanceMagnates_official
Don't miss out on our latest videos, interviews, and event coverage. Subscribe to our YouTube channel for more!
Here's a sneak peek into the FMAS:24 vibrant atmosphere! Join us at Africa’s premium financial event for a transformative experience that combines the best of finance and technology.
From May 20-22, 2024, the Sandton Convention Centre in Sandton, South Africa, will be the hub for over 3,500 attendees to engage in unparalleled networking opportunities, learn from over 150 industry-leading speakers, and explore innovations from 120+ exhibitors.
Secure your free ticket now 🔗 https://events.financemagnates.com/yQx0l?utm_source=youtube&utm_campaign=fmas-is-back&utm_medium=video&RefId=FMAS24+Video+Ad+%5B1%5D
#fmas24 #fmas #fmevents #financeinafrica #traders #investors #affiliates #forexTraders #investmentOpportunities #B2BNetworking #finTech #Innovations #TradingCommunity #BusinessOpportunities #AfricanBusiness #Johannesburg #southafrica
📣 Stay updated with the latest in finance and trading!
Follow FMevents across our social media platforms for news, insights, and event updates. Connect with us today:
🔗 LinkedIn: https://www.linkedin.com/showcase/financemagnates-events/
👍 Facebook: https://www.facebook.com/FinanceMagnatesEvents
📸 Instagram: https://www.instagram.com/fmevents_official
🐦 Twitter: https://twitter.com/F_M_events
🎥 TikTok: https://www.tiktok.com/@fmevents_official
▶️ YouTube: https://www.youtube.com/@FinanceMagnates_official
Don't miss out on our latest videos, interviews, and event coverage. Subscribe to our YouTube channel for more!
Join 3500+ Attendees at FMAS:24 | Africa's Premium Financial Event
Join 3500+ Attendees at FMAS:24 | Africa's Premium Financial Event
Looking to expand your network in #Africa? Join 3500+ attendees at FMAS:24, where online trading, fintech, payments, and crypto meet! Connect with industry leaders and innovators for an unmatched networking experience.
20-22 MAY 2024
Sandton Convention Center, Sandton, South Africa
Register now to secure your spot: https://bit.ly/3JbUpCK
#fmas #fmas24 #fmevents #networking #finance #africa
📣 Stay updated with the latest in finance and trading!
Follow Finance Magnates for news, insights, and event updates across our social media platforms. Connect with us today:
🔗 LinkedIn: https://www.linkedin.com/company/financemagnates/
👍 Facebook: https://www.facebook.com/financemagnates/
📸 Instagram: https://www.instagram.com/financemagnates_official
🐦 X (Twitter): https://twitter.com/financemagnates/
📡 RSS Feed: https://www.financemagnates.com/feed/
▶️ Telegram: https://t.me/financemagnatesnews
Don't miss out on our latest videos, interviews, and event coverage.
🔔 Subscribe to our YouTube channel for more!🔔
Looking to expand your network in #Africa? Join 3500+ attendees at FMAS:24, where online trading, fintech, payments, and crypto meet! Connect with industry leaders and innovators for an unmatched networking experience.
20-22 MAY 2024
Sandton Convention Center, Sandton, South Africa
Register now to secure your spot: https://bit.ly/3JbUpCK
#fmas #fmas24 #fmevents #networking #finance #africa
📣 Stay updated with the latest in finance and trading!
Follow Finance Magnates for news, insights, and event updates across our social media platforms. Connect with us today:
🔗 LinkedIn: https://www.linkedin.com/company/financemagnates/
👍 Facebook: https://www.facebook.com/financemagnates/
📸 Instagram: https://www.instagram.com/financemagnates_official
🐦 X (Twitter): https://twitter.com/financemagnates/
📡 RSS Feed: https://www.financemagnates.com/feed/
▶️ Telegram: https://t.me/financemagnatesnews
Don't miss out on our latest videos, interviews, and event coverage.
🔔 Subscribe to our YouTube channel for more!🔔
Join 3500+ Attendees at FMAS:24 - Africa's Premium Financial Event
Join 3500+ Attendees at FMAS:24 - Africa's Premium Financial Event
Looking to expand your network in #Africa?
Join 3500+ attendees at FMAS:24, where online trading, fintech, payments, and crypto meet! Connect with industry leaders and innovators for an unmatched networking experience.
20-22 MAY 2024
Sandton Convention Center, Sandton, South Africa
Register now to secure your spot: https://bit.ly/3JbUpCK
#fmas #fmas24 #fmevents #networking #finance #africa
Looking to expand your network in #Africa?
Join 3500+ attendees at FMAS:24, where online trading, fintech, payments, and crypto meet! Connect with industry leaders and innovators for an unmatched networking experience.
20-22 MAY 2024
Sandton Convention Center, Sandton, South Africa
Register now to secure your spot: https://bit.ly/3JbUpCK
#fmas #fmas24 #fmevents #networking #finance #africa
Where the Prop Trading Industry Goes from Here | Finance Magnates Podcast
Where the Prop Trading Industry Goes from Here | Finance Magnates Podcast
Explore the tumultuous world of prop trading in this Finance Magnates podcast episode, featuring insights from Head of Axi Select, Greg Rubin.
We're discussing the challenges and shifts caused by MetaQuotes' pivotal decisions affecting MT4 and MT5 users, and how Axi Select offers a unique, realistic path to professional trading, steering clear of traditional prop firm pitfalls.
Tune in for expert analysis on the future of trading and innovative funding models.
The Axi Select programme is only available to clients of AxiTrader Limited. CFDs carry a high risk of investment loss. In our dealings with you, we will act as a principal counterparty to all of your positions. This content is not available for AU, NZ, EU and UK residents. For more information, refer to our Terms of Service. Standard trading fees apply.
This content is provided solely for general informational purposes and should not be construed as financial product advice or an investment recommendation. It has been prepared without considering your personal circumstances.
📣 Stay updated with the latest in finance and trading!
Follow Finance Magnates for news, insights, and event updates across our social media platforms. Connect with us today:
🔗 LinkedIn: https://www.linkedin.com/company/financemagnates/
👍 Facebook: https://www.facebook.com/financemagnates/
📸 Instagram: https://www.instagram.com/financemagnates_official
🐦 X (Twitter): https://twitter.com/financemagnates/
📡 RSS Feed: https://www.financemagnates.com/feed/
▶️ Telegram: https://t.me/financemagnatesnews
Don't miss out on our latest videos, interviews, and event coverage.
🔔 Subscribe to our YouTube channel for more!🔔
Explore the tumultuous world of prop trading in this Finance Magnates podcast episode, featuring insights from Head of Axi Select, Greg Rubin.
We're discussing the challenges and shifts caused by MetaQuotes' pivotal decisions affecting MT4 and MT5 users, and how Axi Select offers a unique, realistic path to professional trading, steering clear of traditional prop firm pitfalls.
Tune in for expert analysis on the future of trading and innovative funding models.
The Axi Select programme is only available to clients of AxiTrader Limited. CFDs carry a high risk of investment loss. In our dealings with you, we will act as a principal counterparty to all of your positions. This content is not available for AU, NZ, EU and UK residents. For more information, refer to our Terms of Service. Standard trading fees apply.
This content is provided solely for general informational purposes and should not be construed as financial product advice or an investment recommendation. It has been prepared without considering your personal circumstances.
📣 Stay updated with the latest in finance and trading!
Follow Finance Magnates for news, insights, and event updates across our social media platforms. Connect with us today:
🔗 LinkedIn: https://www.linkedin.com/company/financemagnates/
👍 Facebook: https://www.facebook.com/financemagnates/
📸 Instagram: https://www.instagram.com/financemagnates_official
🐦 X (Twitter): https://twitter.com/financemagnates/
📡 RSS Feed: https://www.financemagnates.com/feed/
▶️ Telegram: https://t.me/financemagnatesnews
Don't miss out on our latest videos, interviews, and event coverage.
🔔 Subscribe to our YouTube channel for more!🔔