Reply to post:

Ad-borne Cryptowall ransomware is set to claim FRESH VICTIMS

Justin Goldberg

The servers are using ONIONHOST.torpayusd.com (which seems really a web redirect to the tor2web service). Mistoprav LTD is the company behind it.

They have also registered tor4pay.com and tor2pay.com

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon