Cerber ransomware can now detect virtual machines to prevent analysis
One of the most infamous strains of ransomware has evolved, gaining the ability to prevent detection from cybersecurity tools, making it much harder for the malicious software to be analyzed.
The Cerber ransomware was discovered in early 2016. Aside from the typical behavior of encrypting victims' files, the malware also packs a .vbs file, which speaks out its ransom note to further scare those that have been infected.
Furthermore, using a set of assigned Command & Control (C&C) servers, the cybercriminals behind the ransomware have made it possible for almost anyone to distribute Cerber. They earn if they are successful in infecting their victims, with the developer getting 40% of the profit, and the affiliate getting 60%.
