HavanaCrypt ransomware disguises itself as a fake Google update
HavanaCrypt is a new ransomware. It is difficult to detect, disguises itself as a fake Google update and uses Microsoft functions in the attacks. Apparently they want to use Tot as communication, since such a directory is explicitly not encrypted. Attackers often abuse the trust of users in their attacks in order to bypass the protective measures of companies. So, using trusted address spaces and hosts that most companies consider legitimate, safe, and whitelisted is not new. For example, cybercriminals use AWS hosting or hijack other “clean” hosts…