New Ursnif variant switches to Data Theft and Ransomware

Ursnif variant ( a.k.a. Gozi) comes in the form of a DLL called “loader.dll”, and it contains portable executable crypters and is signed with valid certificates, making it more accessible from being caught by systems security tools.