Microsoft is warning users of a Windows computer. By exploiting a security flaw in the Log4j utility, hackers are deploying dangerous ransomware in an attempt to recover cryptocurrency from users and businesses.
Recently, a major security breach was spotted in Log4j, a Java-based logging utility found in many web application frameworks. Initially spotted on Minecraft’s servers, the breach puts the servers of many technology giants at the mercy of hackers, including Apple, Amazon and Twitter.
As developers urgently deploy patches, hackers rush to exploit the security hole to deploy malware. According to experts at Bitdefender, a Romanian cybersecurity company, hackers are taking advantage of the ambient confusion to pushing a new family of ransomware onto Windows computers, Khonsari.
Also read: the number of ransomware attacks in France increased by 32% in one year
Microsoft confirms ransomware takes advantage of Log4J flaw to spread around the world
Microsoft quickly confirmed Bitdefender’s findings in a statement on its site. “Microsoft can confirm public reports from the Khonsari ransomware family. In Microsoft Defender Antivirus data, we have observed a small number of instances of this ransomware being launched from compromised Minecraft clients connected to modified Minecraft servers running a vulnerable version of Log4j ”Microsoft explains, pointing to compromised Minecraft servers.
“Although most of the attacks seen so far seem to target Linux servers, we have also seen attacks against systems running the Windows operating system”, warn Bitdefender researchers. Mirroring most ransomware, like the much publicized Wannacry, Khonsari will lock the computer as soon as it manages to enter the system.
To recover data stored on hard drives, victims will have to pay a ransom in cryptocurrency, usually Bitcoin. “Bitdefender strongly advises its customers to take immediate action and deploy all recommended existing patches and mitigation measures”, says Bitdefender, who reassures by pointing out that Khonsari is not yet widespread.
