SyncCrypt - description
- Last Updated: May 1, 2026
- 1 minute read
- Flowmon Products
- Flowmon Anomaly Detection System
- Documentation
Source:
SyncCrypt ransomware concealing malicious code in JPG files
Attackers distribute SyncCrypt ransomware through spam email attachments containing WSF (Windows Script File) files. When victims open these attachments, the ransomware encrypts files on their computers and adds the .kk extension to the encrypted files.
Flowmon ADS detects both the downloading of this ransomware and its communication with command and control servers.
