Donald Castillo

.EGG Files in Spam Delivers GandCrab v4.3 Ransomware to South Korean Users

We discovered spam mails abusing EGG (.egg) files to deliver the GandCrab v4.3 ransomware. Additionally, the operators behind the spam mails appear to be specifically going after South Korean users, as evidenced by the use of Hangul in the spam mails.

Donald Castillo