Security researcher MalwareHunter discovered today a new malware that he initially believed to be ransomware but ended up being just another annoying piece of junk that falls in the category of trollware, also known as crapware.
This piece of software, appropriately named "Cancer," doesn't destroy any files like ransomware, but merely makes your computer go bonkers by playing annoying music, blocking access to several applications, moving your windows and images across your screen, and popping up all sorts of windows out of nowhere.
This malware is what some security experts would call trollware, malware made with the sole purpose of annoying users and making their computer unusable.
Past examples include CainXPiiCleaner, discovered by GData malware analyst Karsten Hahn last November.
Breaking down CancerDigging into Cancer's source code, which was deobufscated by MalwareHunter, and analyzed by him and Bleeping Computer's resident malware analyst Lawrence Abrams, we can break down some of its "features."
First and foremost, running Cancer triggers a network request to the following URL, where the malware registers with its author. This connection is currently displaying an error, which is typically caused by a broken PHP script, so it is unknown if the server is actually properly recording victims.
Read more here: www.bleepingcomputer.com/news/security/watch-your-computer-go-bonkers-with-cancer-trollware/