Several Israeli companies attacked by Pay2Key ransomware

Several large companies in Israel immediately reported the compromise of their computer networks and infection with the new Pay2Key ransomware virus.

Looks like, that hackers launched an organized attack on Israeli companies in late October. At first, the number of hacks It was small, However, the number of injured companies continues to grow.

“Every day the number of messages about the attacks, associated with the Pay2key virus, Grows ", - Mark
Representatives of Check Point, working in the field of cybersecurity.

According to computer security experts, Attacks pass through a vulnerable connection via RDP about midnight. Night attacks are much easier, After all, the victim’s company is on duty much less IT specialists. After receiving access to an infected computer, Attackers start copies of the virus using the Psexec command on all available computers in the local network. Hacker takes only an hour to infect infrastructure infrastructure.

After that, how the encryption of files on servers and computers of the company will be completed, Hackers leave a file demanding a ransom in bitcoins for decoding. Usually they ask for 7 to 9 BTC, That is, $ 110,000– $ 140,000 at the current rate.

Check Point experts emphasized, that the Pay2key virus was created from scratch, And the used file encryption algorithm using AES and RSA algorithms makes the creation of a mass free decoder impossible. It is still unknown, who created the virus and why among the victims only Israeli companies.

Also 7 On November, the attacks of the Ragnar Locker encryption virus on Capcom and the Campari Group alcohol manufacturer were recorded..