A new spam campaign pretending to be a ‘Critical Microsoft Windows Update’ has been discovered that attempts to deliver the Cyborg Ransomware. Researchers outline how an attacker is sending spam email that pretends to be ‘Critical’ Windows update and prompts the recipient to install it. The supposed Windows update attached to the email is actually a downloader for the Cyborg ransomware that has been renamed to a random named jPG image file. Trustwave told BleepingComputer that this spam campaign was not targeted in nature and was sent to recipients all over the world.
Source: https://www.bleepingcomputer.com/news/security/critical-windows-update-spam-fails-at-delivering-ransomware/