How do ransomware scum decide what to charge you? The Big Mac index

Yep, Fatboy slim-e are reading The Economist

Liam Neeson, Taken

Cybercriminals have put together a strain of ransomware that changes the cost of the extortionate demands depending on the victim’s location, threat intelligence firm Recorded Future reports.

Fatboy, which is being advertised on a Russian-language cybercrime forum, uses The Economist’s Big Mac Index to decide how much to squeeze a victim for, based on the wealth of the country in which they reside. Victims from countries with a higher cost of living will have to pay more than those from poorer nations.

The file-encrypting nasty is being offered through a ransomware-as-a-service model, offering customer support over Jabber, and even a “partner” panel for users to track infection statistics by country and time.

The hacker, using the nickname “polnowz,” described Fatboy as a partnership in ads punting the software on the Russian-language Exploit forum.

Fatboy dashboard [source: Recorded Future blog post]

The author of the Fatboy RaaS has posted screenshots purporting to show he earned at least $5,321 from his own ransomware campaigns using this product. Five particular US infections resulted in these illicit returns.

"The level of transparency in the Fatboy RaaS partnership may be a strategy to quickly gain the trust of potential buyers," according to Recorded Futures. "Additionally, the automatic price adjustment feature shows an interest in customising malware based on the targeted victim."

More details on the file-encrypting nasty can be found in a blog post by threat intelligence specialist Recorded Future here. ?

Biting the hand that feeds IT ? 1998–2017

  • 305452893 2018-01-22
  • 61770892 2018-01-22
  • 59080891 2018-01-22
  • 87471890 2018-01-22
  • 79096889 2018-01-22
  • 734763888 2018-01-22
  • 455411887 2018-01-22
  • 685280886 2018-01-22
  • 615657885 2018-01-22
  • 700163884 2018-01-21
  • 866691883 2018-01-21
  • 994750882 2018-01-21
  • 92145881 2018-01-21
  • 263961880 2018-01-21
  • 5823879 2018-01-21
  • 202428878 2018-01-21
  • 235407877 2018-01-21
  • 949120876 2018-01-21
  • 530375875 2018-01-21
  • 14090874 2018-01-21