Ransom.Linux.ROYAL.THBOBBC

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Übertragungsdetails

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Installation

Fügt die folgenden Prozesse hinzu:

• If the argument -stopvm is used:
  • /bin/sh -c esxcli vm process list > list
  • /bin/sh -c esxcli vm process kill --type=hard --world-id={World ID of the VM to terminate}