Alerts
Events
DCR
Explore Cyware Products
Alerts
Events
DCR
Go to listing page
HavanaCrypt Ransomware Poses as Google Software Update App, Uses Microsoft Hosting Service IP Address as C&C Server
Malware and Vulnerabilities
July 07, 2022
Trend Micro
It disguises itself as a legitimate Google Software Update application and uses a Microsoft web hosting service IP address as its command-and-control (C&C) server to circumvent detection.
Read More
HavanaCrypt Ransomware
Google Software Update app
Microsoft Web Hosting Service
C2 Server
fake app
Publisher
Previous
North Korean Cyber Actors Using Maui Ransomware to Targ ...
Threat Intel & Info Sharing
Next
VSingle malware that obtains C2 server information from ...
Malware and Vulnerabilities