A new ransomware family has emerged that targets servers and encrypts files on network shares even if they haven’t been mapped to the infected computer.
Dubbed DXXD, the new piece of ransomware appends the .dxxd extension to the encrypted files, after which it drops a ransom note onto the infected computers. The malware won’t search for and encrypt only files on the local machine, but it would also target network shares, both mapped and unmapped, a feature that was previously seen in Locky.
Leave a reply
