View source for CryptXXX: new ransomware from the actors behind Reveton, dropping via Angler

{{Publication
|Botnet=CryptXXX, Reveton, Bedep,
|ExploitKit=Angler,
|String=CryptProjectXXX,
|Year=2016
|Date=2016-04-18
|Editor=Proofpoint
|Link=https://www.proofpoint.com/us/threat-insight/post/cryptxxx-new-ransomware-actors-behind-reveton-dropping-angler
|Author=Kafeine,
|Type=Blogpost
|Abstract=Proofpoint researchers recently found a previously undocumented ransomware spreading since the end of March through Bedep after infection via the Angler Exploit Kit (EK). Combining our findings with intelligence shared by Frank Ruiz (Fox IT InTELL) lead us to the same conclusion: this project is conducted by the same group that was driving Reveton ransomware operations and is closely tied to Angler/Bedep. Dubbed "CryptXXX", this new ransomware is currently asking a relatively high $500 per computer to unlock encrypted files. Angler is the number one exploit kit by volume, making the potential impact of new ransomware in the hands of experienced actors with access to this vector quite significant.
}}