Threat Intelligence: Adware Installers Using Rumba Variant STOP
ID: 3c5d4886-b19b-5a18-a8e0-2a17176e0c5c
STIX ID: report--3c5d4886-b19b-5a18-a8e0-2a17176e0c5c
Feed Name: Binary Defense Blog
Threat Score
Rumba is a STOP/DJVU-family ransomware variant actively distributed through adware bundles and cracked software installers (examples: KMSpico, Cubase, Photoshop). Infected files are encrypted and given a .rumba extension, and victims find a ransom note named "openme.txt"; a decryptor has been released allowing victims to recover files without paying.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.