New Ransomware, FessLeak, Taps Adobe Flash Flaws

Invincea researchers report a new ransomware family named FessLeak that is spreading through malicious advertising on high-traffic websites by exploiting recently disclosed Adobe Flash vulnerabilities (notably CVE-2015-0311) and, previously, a file-less technique leveraging System32 (extrac32.exe). FessLeak encrypts victims' drives for ransom, evades analysis by detecting virtualized environments, uses short-lived domains to deliver payloads, and has been observed via malvertising on sites such as HuffingtonPost.com, Photobucket.com and RT.com.