SkyStars Ransomware

SkyStars ransomware, variant of BlackMoon banking trojan encrypts with no recovery note

We here at InfoPocket being a SonicWALL business partner wish to share with you this information. The SonicWall Capture Labs Threat Research Team observed reports of a variant of the BlackMoon banking Trojan called SkyStars. BlackMoon was originally designed to steal user credentials from various South Korean banking institutions. In addition to data theft, the authors later added ransomware capability. This SkyStars ransomware component seems to be in early development.