Jaff Ransomware Shares Backend Infrastructure With Darknet Marketplace Selling Stolen Financial Data

Not too long ago, we touched upon the Jaff ransomware. This particular type of malware demands a two-Bitcoin payment from its victims, which is quite a steep price right now. However, it appears there is a lot more to this malicious tool than first assumed. Further research unveils a new strain of Jaff has direct ties to an underground marketplace selling stolen bank accounts and credit cards.

Jaff Ransomware Is More Dangerous Than Assumed At First

Heimdal Security researchers have made a rather disturbing discovery where the Jaff ransomware is concerned. A newer version of this malware shares its backend infrastructure with a Darknet forum where criminals can buy and sell bank accounts and stolen credit cards. This is quite troubling, to say the least, as it goes to show there is a lot more to Jaff than people first assumed. This particular marketplace is home to tens of thousands of compromised bank accounts, credit cards, and other types of financial information.

Most people should be well aware of how a ransomware attack is not just about encrypting files these days. While that is the common component across all types of ransomware these days, these malicious tools are often used to steal information from the victim’s computer as well. In the case of Jaff, it appears harvesting information about the victim is a big part of how it operates. This is a common tactic among cybercriminals these days, as the harvested information can be worth quite a lot of money to the right people.

Even though Jaff has not been around all that long, researchers have expressed their concern over the ransomware already. Particularly where the distribution campaign is concerned, as the developers use large-scale email campaigns to distribute a PDF attachment. Once the user downloads the attachments and opens it, they will see a Microsoft Word document asking for specific macro permissions. Granting these permissions results in the ransomware payload being downloaded in the background.

It is evident there is much more to this new ransomware strain than originally assumed. Now that we know multiple iterations of this malicious software exist, the question is what other types of Jaff may be capable of. It is possible all versions share the data harvesting trait. After all, having a tool to harvest bank accounts and credit cards broadcast that information directly to a darknet marketplace where this information is sold is quite ingenious.

For the time being, security researchers are still in the process of gathering additional data about Jaff to see how all of its tools work exactly. It is also possible this ransomware shares quite a few similarities with Dridex, Locky, and other malicious software using the Necurs botnet for distribution. It is unclear what this means for the link to the darknet marketplace in question, though. There is a lot more to the entire ransomware ecosystem than we know right now, and it is kind of scary to think of what researchers may uncover over the coming months.

Moreover, it appears Jaff and all of the other malicious tools potentially linked to it mainly target victims in the US, Germany, Spain, and France. On the darknet marketplace, buyers can find targets with the “most potential,” which is a very strange feature. It also appears this stolen information is used to gain access to cash, which is then turned into Bitcoin and other cryptocurrencies. This entire investigation won’t give Bitcoin a good name by any means, that much is evident

If you liked this article, follow us on Twitter @themerklenews and make sure to subscribe to our newsletter to receive the latest bitcoin, cryptocurrency, and technology news.


  1. zortilo nrel December 17, 2020
  2. zortilo nrel February 7, 2021
  3. Newport House Clearance February 9, 2021
  4. click to read more February 10, 2021
  5. Scrapbook February 13, 2021
  6. grama esmeralda nova iguacu February 13, 2021
  7. bordados em são Paulo February 13, 2021
  8. cosmetic products February 13, 2021
  9. Auto detailing bangor me February 14, 2021
  10. m2obras February 14, 2021
  11. tela respiravel para berço February 15, 2021
  12. anytime online February 15, 2021
  13. Mpo383 February 16, 2021
  14. TS911 February 16, 2021
  15. Marriage Counselling February 17, 2021
  16. solar panel malaysia February 17, 2021
  17. modern depot price February 17, 2021
  18. laptop repair shop near me February 17, 2021
  19. Noticias Online February 18, 2021
  20. xicara personalizada February 19, 2021
  21. Amazon coupons February 19, 2021
  22. How to Sell on Amazon February 19, 2021
  23. click here February 19, 2021
  24. e-commerce February 20, 2021
  25. Adelia Palencia February 21, 2021
  26. der reisen February 21, 2021
  27. Rastreador de Moto February 21, 2021
  28. Situs judi terpercaya February 22, 2021
  29. pauschalreisen February 22, 2021
  30. teach English online February 23, 2021
  31. video bumper examples February 24, 2021
  32. solar panel malaysia February 25, 2021
  33. solar panel in malaysia February 25, 2021
  34. 3m water filter February 25, 2021
  35. banda de formatura sp February 26, 2021
  36. forma leblon February 26, 2021
  37. property loan Melbourne March 4, 2021
  38. klinkeris March 4, 2021
  39. Quanto custa esquadrias March 5, 2021
  40. แทงหวย March 6, 2021
  41. slotxoth March 6, 2021
  42. Daftar Vivoslot Online March 7, 2021
  43. kml files March 8, 2021
  44. Free blog March 8, 2021
  45. Trackless folding gate March 8, 2021
  46. Situs Domino Online March 8, 2021
  47. Daftar Poker Ovo March 9, 2021
  48. astra tutorial 2021 March 10, 2021
  49. website speed optimize March 10, 2021
  50. Buy Tramadol Online March 11, 2021
  51. Vivoslot March 11, 2021
  52. สล็อต March 11, 2021
  53. here March 11, 2021
  54. more help March 11, 2021
  55. สล็อต xo 888 March 12, 2021
  56. สล็อต jdb March 12, 2021
  57. Judi Vivoslot Online March 12, 2021
  58. pgslot168 March 12, 2021
  59. esurance quote March 13, 2021
  60. stimerex bula March 13, 2021
  61. Filmes e Séries Online March 13, 2021
  62. situs poker idn March 14, 2021
  63. indian cricket team March 16, 2021

Leave a Reply