Defray: new ransomware that begins to spread on the internet

Ransomware has become one of the most talked about words of the year. And it remains the way of choice for attacking teams from around the world throughout this year. Today is the turn of a new ransomware. It's called Defray has already started to expand on the Internet.

Defray: New ransomware that begins to spread on the Internet

Several companies have been those that have alerted about the presence of Defray. It appears to be a somewhat selective threat, as it focuses on institutions and large companies. Although, it seems that so far it has already been distributed in quite a few countries.

New ransomware called Defray

According to experts, this new ransomware is being distributed through Microsoft Word documents. Documents that are attached in emails. The victims are told that the document contains details of a pending invoice or a judicial order. When opening the file, the activation of the macros is requested.

Defray seems to be distributed too thanks to the help of PowerShell scripts. Not only through email. This means that many security tools do not detect this threat. Since many are not able to detect and stop scripts in time. Something that can have fatal consequences.

Once installed, Defray would have absolute control over the user's computer. It is capable of performing a wide range of tasks. These include running, collecting information about users, listing system files and folders, or closing certain security applications. At the moment it does not seem to start encrypting files, something unusual in ransomware. Have you heard about this new ransomware?