Home Malware Programs Trojans TROJ_RANSOM.DDR

TROJ_RANSOM.DDR

Posted: November 26, 2012

Threat Metric

Threat Level: 9/10
Infected PCs: 7
First Seen: November 26, 2012
Last Seen: July 3, 2021
OS(es) Affected: Windows

TROJ_RANSOM.DDR is a Trojan that is used by attackers to distribute Police ransomware carrying fake digital signature. The digital signature's name and its issuing provider are doubtful. The main purpose of the fake signature is likely to elude digisig checks. PC users may face these files by visiting malicious websites or websites exploiting a Java vulnerability. Once executed, TROJ_RANSOM.DDR locks the targeted computer and does not allow PC users to access it. TROJ_RANSOM.DDR displays a tricky pop-up warning message to frighten victims into believing they have violated certain laws and demands a ransom to be paid via specific payment systems to restore access to the PC. The bogus pop-up image/alert created by TROJ_RANSOM.DDR speaks in the name of law enforcement agencies such as the FBI or claims to come from the UK's Police Central e-Crime Unit often stating that computer users have been performing illegitimate actions. Scammers may include expired or fake digital sigs or certificates into the malware infection to trick and cheat PC users into executing it.

Loading...