Facebook ads are being used by Ragnar locker ransomware to exploit targeted victims

Multiple firms have been targeted by Ragnar Locker ransomware by using Facebook ads.

The infamous Ragnar Locker ransomware gang is now running Facebook advertisements to force its victims into paying a ransom. The group is creating Facebook ads to promote their latest attack which was detected on November 9.

The ransomware is now using Facebook ads to encrypt data and launch their attacks. An Italian organization has been attacked by ransomware and they have stolen 2TB of information. In order to prevent the data from getting leaked online, the organization has received a ransom demand.

Security researchers have claimed that these malicious ads are originating from a hacked Facebook account. The account and its ad campaign reached around 7,150 users on Facebook, generated 770 clicks, which cost 21 cents per result.

Researchers have suspected that the hacking group can use multiple accounts to spread this campaign. The above-listed data is with reference to a single account, which makes this attack a severe cause of concern.

NPAV recommends users to stop trusting ads and pop-ups as they are mostly used by hackers to spread their malicious campaigns. Clicking on any of these links or ads can allow hackers to infect your device and use it for their benefit.

Install NPAV on your devices to keep them protected from all kinds of cyberattacks. Use NPAV and join us on a mission to secure the cyber world.