Pokémon Go for Windows with Ransomware – installs a backdoor account and spreads to other drives

When installed – the Pokémon Go for Windows with Ransomware will create a hidden user account called ‚Hack3r‘ and adds it to the Administrators group

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList „Hack3r“ = 0

PokemonGo_Windows_01

This entry was posted on Montag, August 15th, 2016 at 13:26 and is filed under Administration, Healthcare Info, Security Solution. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Leave a Reply

You must be logged in to post a comment.