loader gif

The RIG Exploit Kit is Now Pushing the Buran Ransomware

The RIG Exploit Kit is Now Pushing the Buran Ransomware (Malware and Vulnerabilities)

If you become infected with this ransomware, please make a backup of the HKEY_CURRENT_USER\Software\Buran Registry key, your ransom note, and encrypted files for possible later decryption. The Buran Ransomware encryption process When the RIG exploit kit drops the ransomware executable onto a victim's machine and executes it, the ransomware will copy itself to %APPDATA%\microsoft\windows\ctfmon.exe and launch it from there.

loader gif