Hackers update CryptXXX ransomware to scan networks
A new strain of the CryptXXX ransomware has been upgraded to scan for network resources, security researchers have discovered. According to IT security firm Proofpoint, the malware has been upgraded to version 3.100 and bypasses not only currently available decryption tools but also uses SMB (aka Server Message Block) to scan for available network resources and encrypt them. The ransomware also includes the StillerX information stealing DLL, a new payment portal and changed extensions of encrypted files.