First
discovered
at the beginning of the year, the Spora ransomware has become one of of the most prominent ransomware families of 2017, especially in Russia, a region it appears to target. Spora exhibited worm-like behaviour months before the appearance of WannaCry, using .LNK files, a technique previously used by other malware. (Spora’s implementation is described in detail in a
blog post
from January by
G DATA
‘s Karsten Hahn.)
At VB2017,
Avast
researcher Jakub Křoustek and his former colleague Előd Kironský, now at
ESET
, told the story of Spora: how the malware spreads, how files are encrypted and decrypted, the payment mechanism, and also how, shortly after the same researchers had given a
presentation
about Spora at CARO, the malware was given a complete overhaul.
Előd and Jakub told the story of Spora in a last-minute presentation at VB2017.
Today, we have uploaded the video of Jakub and Előd’s presentation to our
YouTube
channel.
Leave a Reply