![](\"http:\/\/www.borncity.com\/blog\/wp-content\/uploads\/2015\/01\/Schutz.jpg\")
Cerber Ransomware has been on the raise in 2016. There has been several campaigns \u2013 and the worse thing: it seems that Cerber won't fade away in 2017.<\/p>\nCerber Ransomware has been on the raise in 2016. There has been several campaigns \u2013 and the worse thing: it seems that Cerber won't fade away in 2017.<\/p>\n
<\/p>\n
A fake credit card email campaigns addressed people who are shopping lately for holiday season 2016 contains a Cerber download link (see this Microsoft article<\/a>). But there has been several campaigns over the last months of 2016 (see the graph below).<\/p>\n Cerber will be distributed in most cases via an e-mail attachment, like it is shown below as a zip attachment.<\/p>\n Microsoft has analyzed telemetry data from Windows Defender. The result shows that this latest exploit kit attack that leads to Cerber largely affects Asia and Europe.<\/p>\n Each campaign delivers variants of Cerber, but all variants tries to encrypt user data on infected systems and ask for money to unencrypt the data. Windows 10 has security technologies that can detect this new batch of updated Cerber ransomware. Microsoft is discussing further details about Cerber within this Technet blog post<\/a>. <\/p>\n","protected":false},"excerpt":{"rendered":" Cerber Ransomware has been on the raise in 2016. There has been several campaigns \u2013 and the worse thing: it seems that Cerber won't fade away in 2017.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[580,2],"tags":[615,243,69,194],"class_list":["post-1972","post","type-post","status-publish","format-standard","hentry","category-security","category-windows","tag-cerber","tag-ransomware","tag-security","tag-windows"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/1972","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=1972"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/1972\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=1972"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=1972"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=1972"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\"Cerber](\"https:\/\/web.archive.org\/web\/20170207124535\/https:\/\/msdnshared.blob.core.windows.net\/media\/2016\/12\/cerber-machine-encounters.png\" "\\"Cerber")
(Source: Microsoft)<\/p>\n![\"Cerber](\"https:\/\/web.archive.org\/web\/20170207100438\/https:\/\/msdnshared.blob.core.windows.net\/media\/2016\/12\/cerber-email-1.png\" "\\"Cerber")
(Source: Microsoft)<\/p>\n![\"Cerber](\"https:\/\/web.archive.org\/web\/20170207105655\/https:\/\/msdnshared.blob.core.windows.net\/media\/2016\/12\/cerber-rig-exploit-distribution.png\" "\\"Cerber")
(Source: Microsoft)<\/p>\n