Ransomware ProLock uses QakBot infections to access networks, gain persistence and avoid detection. ProLock first emerged in March as a successor to PwndLocker and has made its mark targeting financial, healthcare, government and retail organizations. The use of the trojan plays into an existing cybercrime trend, researchers say. The new version of ProLock has a neat trick that lets it avoid detection: It replaces the current version with the current one with the new version, ExecExec
Source: https://threatpost.com/prolock-ransomware-qakbot-trojan/155828/