Skip to content
MalwareWiki

Malware

dearcry

aka DoejoCrypt

According to PCrisk, DearCry ransomware has been observed infecting systems via ProxyLogon vulnerabilities of Microsoft Exchange servers - mail and calendaring servers developed by Microsoft.

dearcry, also known as DoejoCrypt, is a Windows malware family.

Background

PCrisk reports that DearCry ransomware has been seen compromising systems through the ProxyLogon vulnerabilities in Microsoft Exchange, Microsoft's mail and calendaring server software. Even though patches for these flaws were available, thousands of Exchange servers still remained unpatched at the time of the research.

Source: Malpedia (Fraunhofer FKIE).