Ransomware - description

Sources:

Fallout exploit kit delivering GandCrab ransomware through malvertising campaigns

Technical analysis of GandCrab ransomware indicators of compromise

Research on websites distributing botnets, cryptocurrency miners, and ransomware

Instagram account takeovers linked to ransomware distribution

This pattern detects various types of ransomware that spread through social engineering tactics or malicious advertising campaigns. These threats encrypt victim computers and some variants also install cryptocurrency mining software.

Flowmon ADS detects communication with command and control servers and other indicators of compromise associated with ransomware infections.