The virus, when successfully installed, will encrypt files and then request a payment in the form of Bitcoin from victims in order to unlock their systems.Įxperts say there’s likely more to the story than a simple ransom collection.Īn investigation into BadRabbit from both law enforcement and the private research community is ongoing.

The attack, dubbed “BadRabbit,” infected computers inside Ukrainian and Russian government agencies, Ukrainian transportations facilities and Russian news outlets among other targets causing a disruption in normal business operations that continues for some until today.Īlthough most of BadRabbit’s impact occurred in Russia, there’s evidence that the malware compromised organizations in several countries other than Ukraine, including Japan and Turkey. Those responsible for two of the largest ransomware attacks of 2017 designed their malware to carefully handle computers with Russian anti-virus products installed, security researchers have told CyberScoop.įor the third time in less than six months, a ransomware-style cyberattack spread across Eastern Europe in a matter of hours.

Dr kaspersky lab