What is Scarab ransomware?
This ransomware variant is dubbed Scarab because of the extension it adds to encrypted files; it has been around since at least June this year when it was discovered by a security researcher. Lately Scarab has seen a rapid increase in activity, distributed to users mostly by spam emails with 7Zip archives containing supposed images of scanned documents. Once opened, these “images”, which are really Visual Basic Script files, would download and launch a Scarab ransomware executable. Scarab would scan the computer for most common file types, create encrypted versions of those files and delete the originals.