SMBs, beware: Microsoft said this week it has discovered a North Korean crew targeting small businesses with ransomware since September of last year. The group, which calls itself H0lyGh0st, appears to be primarily motivated by money, Microsoft Threat Intelligence Center (MSTIC) researchers said. After the gang gets its eponymous malware onto a victim’s network, it follows the standard ransomware playbook: encrypt files, and demand a Bitcoin payment to restore the data.
Link: North Korean ransomware slingers set sights on SMBs
via http://www.theregister.com