Emails with fake COVID-19 test results are spreading King Engine ransomware

Researchers have found new ransomware being spread by hackers using phishing emails.

A new variant of Hentai Onichan ransomware has been found by researchers which is dubbed as "King Engine". The new variant exfiltrates data and demands a massive amount as ransom, which is significantly higher than previously discovered Hentai OniChan campaigns.

Hackers are using fake emails with the target's COVID-19 test result attachment. The attachment is fake and is being used by hackers to lure their victims into downloading the attachment which is actually the ransomware file.

Above attached is an image of the email which states that there is a nurse assigned to the victim to answer their queries. However, this is fake and is used by hackers just to make the email appear legitimate.

The ransom amount demanded by the hackers is 50 BTC ($676,000) approximately. The ransom amount is high and many of their targets will fail to pay such a huge amount.

NPAV recommends users to avoid these emails and the alarming situations that they create. These emails are fake and are mere ransomware campaigns that hacker groups are launching. Install NPAV on your devices to keep them protected from all kinds of cyberattacks.

Use NPAV and join us on a mission to secure the cyber world.