{"id":7956,"date":"2019-05-29T16:00:39","date_gmt":"2019-05-29T10:30:39","guid":{"rendered":"https:\/\/antivirus.comodo.com\/blog\/?p=7956"},"modified":"2020-09-15T17:07:27","modified_gmt":"2020-09-15T11:37:27","slug":"spora-ransomware","status":"publish","type":"post","link":"https:\/\/antivirus.comodo.com\/blog\/computer-safety\/spora-ransomware\/","title":{"rendered":"What Is Spora Ransomware?"},"content":{"rendered":"
\"Spora<\/div>\n

Discovered on January 10, 2017, Spora is a type of ransomware that first encrypts a victim\u2019s files and then demands money to decrypt those files. This ransomware has infected several computers within a short time due to a huge spam campaign. Spora has a unique feature of working \u201coffline.\u201d Spora ransomware mostly spreads through phishing emails containing malicious attachments or via drive-by downloading. Drive-by downloading happens when a user mistakenly visits an infected website, after which, malware gets downloaded and installed without the user\u2019s knowledge.<\/span><\/p>\n

Spread of Spora Ransomware Variants in 2017<\/span><\/h2>\n

In August 2017, malware researchers identified new variants of Spora. The initial reports about ransomware updates appeared on August 4. The latest variant spreads as an obfuscated radF14DE.exe file. Though it does not affix any extension to the targeted files, the Spora ransomware<\/a> continues to corrupt them and demands the victim to pay a specific amount for data recovery. Furthermore, the ransom note indicates that the ransom amount will increase if users fail to pay within the next four days. <\/span><\/p>\n

An update on the second variant of the Spora ransomware was reported on August 7. This variant was distributed as an obfuscated PE\/HTA bundle in ZIP archives attached to phishing emails. On August 14, researchers reported the third variant, which targets only Russian computers. This variant spreads through malicious spam emails that include ZIP files. One unique feature about this variant is that it does not rename targeted files and does not affix any extensions.<\/span><\/p>\n

How Spora Ransomware Infects Your PC<\/span><\/h2>\n