Researchers from Invincea have been tracking a Ransomware campaign out of Russia. Russian criminals used a real-time ad-bidding network to deliver malware to victims without using a single file, as the code was extracted from system memory. The malware, Kovter, was being delivered by an exploit kit, but that was only half the story. The attack called Fessleak – can be scripted and the burner domains only last as long as it takes to update proxy lists or black lists.”]