cancel
Showing results for 
Search instead for 
Did you mean: 

How to deal with the new ransomware MongoLock

I could not find the knowledge of Ransom.MongoLock from McAfee.com. But I can get the information from Symantec.com. https://www.symantec.com/security-center/writeup/2019-011816-0734-99 Could you please give me more information if this ransom was already in the updated DAT file ? Thanks.
3 Replies
McAfee Employee hem
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: How to deal with the new ransomware MongoLock

Moved to Malware group.

Was my reply helpful?

If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?
Highlighted
McAfee Employee dvarnell
McAfee Employee
Report Inappropriate Content
Message 3 of 4

Re: How to deal with the new ransomware MongoLock

Identifying whether detection in DATs exists or not is difficult to say for certain as we would need hashes or samples to be able to tell you for sure. However, I found 35 hashes which appear to be different variants of this ransomware and they are all covered currently. If you have any specific files you are looking for information on, let us know and we can check for you.

Reliable Contributor tao
Reliable Contributor
Report Inappropriate Content
Message 4 of 4

Re: How to deal with the new ransomware MongoLock

Perhaps McAfee has named it (like so many other AV companies) with a different name:

Ransomware MongoLock Immediately Deletes Files, Formats Backup Drives
https://www.trendmicro.com/vinfo/hk-en/security/news/cybercrime-and-digital-threats/ransomware-mongo...

55 engines detected this file SHA-256 698be23b36765ac66f53c43c19ea84d9be0c3d7d81983726724df6173236defa

https://www.virustotal.com/#/file/698be23b36765ac66f53c43c19ea84d9be0c3d7d81983726724df6173236defa/d...

If this information was helpful or has answered your question, please select Accept as Solution. This will assist other memebers