Synopsis | |
---|---|
Begin | 2018-03-06 08:40:00 |
End | 2018-03-06 14:00:00 |
Affected | Users of imappsecr, imappdir and astropresentie shares |
Due to an accidental opening of an e-mail attachment (called Resume.doc), which contained a macro-based ransomware, all the files and directories on the mentioned shares were either removed or encrypted and a message was left on the infected computer to contact a certain URL to get the files back. The files were restored from backup and the PC wiped clean and re-installed. NB. The f-secure software did not recognise this malware yet at the time.