Cybercriminals Impersonate Russian APT ‘Fancy Bear’ to Launch DDoS Attacks

Cybercriminals posing as the Russian APT group Fancy Bear have been launching DDoS attacks against companies in the financial sector and demanding ransom payments, according to a new report.

The large-scale, multi-vector DDoS attacks come with accompanying ransom letter. They started about a week ago against financial companies mainly located in Singapore, South Africa, and some Scandinavian countries, according to the report, which also published a copy of the ransom letter.

The group, which appears to actually own a DDoS botnet, is asking victims for payments of two Bitcoin. On Monday morning, one Bitcoin was selling for about $9,300.

Read more…
Source: ThreatPost