WEB-THREAT_CRYPWALL
July 08, 2015
PLATFORM:
Windows
OVERALL RISK RATING:
DAMAGE POTENTIAL:
REPORTED INFECTION:
Threat Type: Web Threat
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This detection is for web threats related to Cryptowall. These web threats, usually URLs, are embedded in email and used to redirect and download Cryptowall malware. These threats are also found in HTML file attachments, embedded as iframe tags. Users who open the HTML page are redirected to a file storage site, such as Google Drive, where the Cryptowall malware is hosted.