Magniber ransomware now targets Windows 11 machines

Cybersecurity software provider 360 Total Security has reported in its new blog post that Magniber ransomware, which was previously spotted in 2017 and infected a considerable number of machines earlier this year,  has been upgraded to target Windows 11 machines and Windows users who make a habit of downloading pirated content.

Magniber’s attack vector resembles a Windows update, and these malicious files are frequently found in downloads from forums, cracked software, and bogus porn websites. Once downloaded and executed, the ransomware encrypts files using RSA+AES, with RSA using 2048 bits.

According to 360 Total Security, each victim is directed to an independent payment page and asked to pay a ransom of 0.09 Bitcoin (currently $2,848) within five days, or the ransom will be doubled. The link will reportedly become invalid if the ransom is not paid within an unspecified time.

According to the company, the ransomware’s attack volume has increased significantly since May 25, and some of its distribution package names have been updated, including a ’win10-11 system upgrade software.msi’ file.

While the ransomware itself hasn’t changed much, the fact that it can now infect multiple versions of Windows operating systems is likely to cause the rise in infections. According to reports, since April 27, an increasing number of victims have been posting their stories on the BleepingComputer forum in the hopes of finding a solution. It is strongly advised to avoid warez and crack sites, as these are easily exploited to serve malware to unsuspecting users