{"id":49076,"date":"2022-10-28T22:11:04","date_gmt":"2022-10-28T22:11:04","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/this-windows-worm-evolved-into-slinging-ransomware-heres-how-to-detect-it\/"},"modified":"2022-10-28T22:11:04","modified_gmt":"2022-10-28T22:11:04","slug":"this-windows-worm-evolved-into-slinging-ransomware-heres-how-to-detect-it","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/this-windows-worm-evolved-into-slinging-ransomware-heres-how-to-detect-it\/","title":{"rendered":"This Windows worm evolved into slinging ransomware. Here’s how to detect it"},"content":{"rendered":"

Raspberry Robin, a worm that spreads through Windows systems via USB drives, has rapidly evolved: now backdoor access is being sold or offered to infected machines so that ransomware, among other code, can be installed by cybercriminals.<\/p>\n

In a report<\/a> on Thursday, Microsoft’s Security Threat Intelligence unit said Raspberry Robin is now “part of a complex and interconnected malware ecosystem” with links to other families of malicious code and ties to ransomware infections.<\/p>\n

Ultimately, Raspberry Robin first appeared to be a strange worm that spread from PC to PC with no obvious aim. Now whoever is controlling the malware is seemingly using it to offer access to infected machines so that other software nasties can be deployed, such as ransomware, by other miscreants.<\/p>\n