The latest generation of Reveton, the infamous “police” lock screen/ransomware, targets new black market business. The most common infection is via the well-known exploit kits. The malware can crack or decrypt quite complex passwords stored in various forms. The banking module targets 17 German banks and depends on geolocation. The crypto currency module steals passwords of the most widely used wallets. This module searches browser and cookie history files and searches cookie and cookie files. It can close QT wallets and imitate the login screen after the next execute.”]
Source: https://blog.avast.com/2014/08/19/reveton-ransomware-has-dangerously-evolved/