CERTFR-2019-CTI-007 : ? BitPaymer/IEncrypt ransomware (21 octobre 2019)

French version: ????????

BitPaymer, also known as FriedEx or IEncrypt, is used since at least July 2017. It is used against private and public entities in targeted attacks, manually operated.

Research from security company ESET linked BitPaymer to Dridex (sophisticated banking Trojan used since 2014 and known to target financial sector) sharing multiple technical similarities with the latter. Threat Actor operating Dridex could have diversified its lucrative activities, learning from success stories of earlier ransomware.

DOWNLOAD THE REPORT