Due to an accidental opening of an e-mail attachment (called Resume.doc), which contained a macro-based ransomware, all the files and directories on the mentioned shares were either removed or encrypted and a message was left on the infected computer to contact a certain URL to get the files back. The files were restored from backup and the PC wiped clean and re-installed. NB. The f-secure software did not recognise this malware yet at the time.
- Type
- interruption
- Begin
- 2018-03-06 08:40:00
- End
- 2018-03-06 14:00:00
- Duration
- 5h20m0s
- Affected
- Users of imappsecr, imappdir and astropresentie shares
- Source
- cpk/1227.md
- Created
- 2018-03-06 08:40:00
- Updated
- 2026-10-08 22:57:13