Recently, threat actors have created new ransomware named PureLocker written in PureBasic, which can hit Windows, Mac, and Linux. PureBasic is a BASIC based programming language for Windows/Mac/Linux. As the file is written in a language that many AV providers struggle to establish detections for, the malware went undetected for at least three weeks or so. This malware is being currently distributed by a well-known MaaS (Malware as a Service) provider which has been used by Cobalt Gang, Fin6, and other threat groups.
Written by: Nataliia Zdrok, Threat Intelligence Analyst at Binary Defense Russia’s invasion of Ukraine increased