--- title: New Strain of Ransomware Encrypts Email Inboxes description: A new type of ransomware is coming for cloud email inboxes. While this particular strain was developed by white hat hackers and hasn't been seen in the wild yet, it's a wake up call for those who use cloud-based email services like Gmail or Exchange. image: https://blog.seedspark.com/hubfs/180612_Ransomcloud_Blog-Banner.jpg --- [![logo-white-2020](https://blog.seedspark.com/hs-fs/hubfs/logo-white-2020.png?width=80&height=80&name=logo-white-2020.png "logo-white-2020")](https://seedspark.com/) [![logo-square](https://blog.seedspark.com/hs-fs/hubfs/logo-square.png?width=55&height=54&name=logo-square.png "logo-square")](https://seedspark.com/) [![Contact Us](https://no-cache.hubspot.com/cta/default/1546797/3ad3da3a-9602-4c46-afb0-274659a1f959.png)](https://cta-redirect.hubspot.com/cta/redirect/1546797/3ad3da3a-9602-4c46-afb0-274659a1f959) - [**](https://www.facebook.com/sharer/sharer.php?u=https://blog.seedspark.com/blog/new-strain-of-ransomware-encrypts-email-inboxes&title=New%20Strain%20of%20Ransomware%20Encrypts%20Email%20Inboxes&description=A%20new%20type%20of%20ransomware%20is%20coming%20for%20cloud%20email%20inboxes.%20While%20this%20particular%20strain%20was%20developed%20by%20white%20hat%20hackers%20and%20hasn't%20been%20seen%20in%20the%20wild%20yet,%20it's%20a%20wake%20up%20call%20for%20those%20who%20use%20cloud-based%20email%20services%20like%20Gmail%20or%20Exchange.) - [**](https://twitter.com/intent/tweet?source=https://blog.seedspark.com/blog/new-strain-of-ransomware-encrypts-email-inboxes&text=New%20Strain%20of%20Ransomware%20Encrypts%20Email%20Inboxes%20-%20https://blog.seedspark.com/blog/new-strain-of-ransomware-encrypts-email-inboxes) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.seedspark.com/blog/new-strain-of-ransomware-encrypts-email-inboxes&title=New%20Strain%20of%20Ransomware%20Encrypts%20Email%20Inboxes&summary=A%20new%20type%20of%20ransomware%20is%20coming%20for%20cloud%20email%20inboxes.%20While%20this%20particular%20strain%20was%20developed%20by%20white%20hat%20hackers%20and%20hasn't%20been%20seen%20in%20the%20wild%20yet,%20it's%20a%20wake%20up%20call%20for%20those%20who%20use%20cloud-based%20email%20services%20like%20Gmail%20or%20Exchange.) 14 June 2018 Thursday # New Strain of Ransomware Encrypts Email Inboxes By [Taylor Dolinger](https://blog.seedspark.com/blog/author/taylor-dolinger) In: [Technology](https://blog.seedspark.com/blog/topic/technology) A new type of ransomware is coming for cloud email inboxes. While this particular strain was developed by white hat hackers and hasn't been seen in the wild yet, it's a wake-up call for those who use cloud-based email services like Gmail or Exchange. According to [KnowBe4](https://blog.knowbe4.com/heads-up-new-ransomware-strain-encrypts-cloud-email-real-time-video), this kind of ransomware relies on social engineering to deceive users into giving hackers access to their email account. --- ![Don't Get Hooked!](https://blog.seedspark.com/hs-fs/hubfs/S3_Blog5Graphic.jpg?width=1&name=S3_Blog5Graphic.jpg)![ransomware gif](https://blog.seedspark.com/hs-fs/hubfs/ransomware%20gif.gif?width=850&name=ransomware%20gif.gif) --- ** ** **What To Look For**   The method starts by sending a branded email that promises a Microsoft anti-spam service. When the user clicks on the email to install the service, they instead receive a ransomware payload that encrypts all of their emails and attachments in real time.   This attack, called "ransomcloud" will work for any cloud email provider that allows a third-party application control over the email via OAuth. With Google, this will work if you get the app past their verification process. Office 365 doesn't verify the app at this point, so it makes an attack like this much easier.   ![Do NOT click on the link in the Microsoft AntiSpam PRO email. If the link is clicked, do NOT select Accept in the app prompt.](https://blog.seedspark.com/hs-fs/hubfs/Blog%20Post%20Img.png?width=1&name=Blog%20Post%20Img.png)![Do NOT click the link bolded in the Microsoft AntiSpam PRO email. If the link is selected, you will be asked to accept the app. Do NOT accept the app.](https://blog.seedspark.com/hs-fs/hubfs/Blog%20Post%20Img.png?width=2238&name=Blog%20Post%20Img.png)   ** What To Do**   As always, it's important to educate your users to double and triple check any attachments or links before they click on them. If it seems suspicious, tell users to err on the safe side and send it to the IT department for help or delete the email.   For more tips on how to spot a phishing email and avoid falling victim to these common attacks, please view [***Phishing Attacks: How To Identify & Avoid Them ***](https://blog.seedspark.com/blog/how-to-identify-and-avoid-phishing-attacks)and[*** Social Engineering Red Flags***](https://blog.seedspark.com/hubfs/Cut%20Sheets/180419_SS_Social-Engineering-Red-Flags.pdf). Should the worst case scenario occur, a full back-up of your environment is necessary to avoid costly business downtime. Learn how [***Cloud Protect***](https://resources.seedspark.com/cloud-protect-and-cloud-dns-threat-intelligence-protection-0) for Office 365 or G Suite can help get you back to business fast after a ransomware attack in the cloud.   ***Sources:*** [https://www.datto.com/blog/new-strain-of-ransomware-encrypting-email-inboxes](https://www.datto.com/blog/new-strain-of-ransomware-encrypting-email-inboxes) [https://blog.knowbe4.com/heads-up-new-ransomware-strain-encrypts-cloud-email-real-time-video](https://blog.knowbe4.com/heads-up-new-ransomware-strain-encrypts-cloud-email-real-time-video)   **Tags:** [Technology](https://blog.seedspark.com/blog/topic/technology), [Digital Age](https://blog.seedspark.com/blog/topic/digital-age), [Security](https://blog.seedspark.com/blog/topic/security) Share: - [**](https://www.facebook.com/sharer/sharer.php?u=https://blog.seedspark.com/blog/new-strain-of-ransomware-encrypts-email-inboxes&title=New%20Strain%20of%20Ransomware%20Encrypts%20Email%20Inboxes&description=A%20new%20type%20of%20ransomware%20is%20coming%20for%20cloud%20email%20inboxes.%20While%20this%20particular%20strain%20was%20developed%20by%20white%20hat%20hackers%20and%20hasn't%20been%20seen%20in%20the%20wild%20yet,%20it's%20a%20wake%20up%20call%20for%20those%20who%20use%20cloud-based%20email%20services%20like%20Gmail%20or%20Exchange.) - [**](https://twitter.com/intent/tweet?source=https://blog.seedspark.com/blog/new-strain-of-ransomware-encrypts-email-inboxes&text=New%20Strain%20of%20Ransomware%20Encrypts%20Email%20Inboxes%20-%20https://blog.seedspark.com/blog/new-strain-of-ransomware-encrypts-email-inboxes) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.seedspark.com/blog/new-strain-of-ransomware-encrypts-email-inboxes&title=New%20Strain%20of%20Ransomware%20Encrypts%20Email%20Inboxes&summary=A%20new%20type%20of%20ransomware%20is%20coming%20for%20cloud%20email%20inboxes.%20While%20this%20particular%20strain%20was%20developed%20by%20white%20hat%20hackers%20and%20hasn't%20been%20seen%20in%20the%20wild%20yet,%20it's%20a%20wake%20up%20call%20for%20those%20who%20use%20cloud-based%20email%20services%20like%20Gmail%20or%20Exchange.) ### Written by [Taylor Dolinger](https://blog.seedspark.com/blog/author/taylor-dolinger) As an experienced VP of Marketing, Taylor brings a distinctive blend of expertise in graphic design, UI/UX, CRM implementation, and marketing automation strategies. She's passionate about bridging the gap between aesthetic design and functional user experiences, ensuring that brands look impeccable, deeply resonate with their audiences, and efficiently reach their target markets. Her holistic approach melds creative visuals with the power of automated marketing tools that amplify brand impact and engagement. - [**](https://www.linkedin.com/in/taylorpaigeclark/) PREVIOUS POST [** Data Encryption: A Key Component of Malware ](https://blog.seedspark.com/blog/data-encryption-a-key-component-of-malware) [**](https://blog.seedspark.com/blog/new-strain-of-ransomware-encrypts-email-inboxes#top) Next Post [Don't Forget to Lock the Door: Security in 2018 with Some Old School Weapons **](https://blog.seedspark.com/blog/dont-forget-to-lock-the-door-security-in-2018-with-some-old-school-weapons) [Content Title](https://blog.seedspark.com/blog/new-strain-of-ransomware-encrypts-email-inboxes#) Description ### Search ### Recent Posts [ Building a Resilient Business: Strategies for Navigating Economic Uncertainty ](https://blog.seedspark.com/blog/building-a-resilient-business-strategies-for-navigating-economic-uncertainty) [Chad Jenkins](https://blog.seedspark.com/blog/author/chad-jenkins) Feb 1, 2024 [ Harnessing Data for Business Success: A Comprehensive Guide to Data-Driven Decision-Making ](https://blog.seedspark.com/blog/harnessing-data-for-business-success-a-comprehensive-guide-to-data-driven-decision-making) [Chad Jenkins](https://blog.seedspark.com/blog/author/chad-jenkins) Jan 8, 2024 [ Top Business Trends of 2024: Strategies for Growth and Success ](https://blog.seedspark.com/blog/top-business-trends-of-2024-strategies-for-growth-and-success) [Chad Jenkins](https://blog.seedspark.com/blog/author/chad-jenkins) Jan 4, 2024 [ Empowering Organizations with CISA's Cybersecurity Awareness Month 2023 Toolkit ](https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit) [Patrick Kinsley](https://blog.seedspark.com/blog/author/patrick-kinsley) Oct 26, 2023 [ Four Essential Steps to Enhance Your Online Safety ](https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety) [Patrick Kinsley](https://blog.seedspark.com/blog/author/patrick-kinsley) Oct 19, 2023 ### Popular Posts [ The 8 Best Productivity Tools Included with Microsoft 365 ](https://blog.seedspark.com/blog/meet_office365) [Samuel Adams](https://blog.seedspark.com/blog/author/samuel-adams) - Apr 21, 2021 [ Bots Are Stealing MFA Codes and Accessing Accounts - The New Cyber Threat in 2021 ](https://blog.seedspark.com/blog/mfa-code-stealing) [Samuel Adams](https://blog.seedspark.com/blog/author/samuel-adams) - Nov 3, 2021 [ What is Windows 11 S Mode and Should You Use It? ](https://blog.seedspark.com/blog/windows11-smode) [Samuel Adams](https://blog.seedspark.com/blog/author/samuel-adams) - Sep 17, 2021 [ Alternatives to Using SMS for 2-factor Authentication ](https://blog.seedspark.com/blog/alternatives-to-using-sms-for-2-factor-authentication) [Robert Griffin](https://blog.seedspark.com/blog/author/robert-griffin) - Mar 9, 2023 [ How to Use Shifts in Microsoft Teams for Your Organization ](https://blog.seedspark.com/blog/shifts_microsoft_teams) [Samuel Adams](https://blog.seedspark.com/blog/author/samuel-adams) - Jul 2, 2020 ## Related Post - [**](https://www.facebook.com/sharer/sharer.php?u=https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit&title=Empowering%20Organizations%20with%20CISA's%20Cybersecurity%20Awareness%20Month%202023%20Toolkit&description=With%20the%20end%20of%20October%20just%20around%20the%20corner,%20that%20also%20means%20it%20is%20the%20end%20of%20Cybersecurity%20Awareness%20Month.%20The%20Cybersecurity%20and%20Infrastructure%20Security%20Agency%20(CISA)%20has%20taken%20a%20significant%20step%20in%20this%20direction%20by%20unveiling%20the%20Cybersecurity%20Awareness%20Month%202023%20Toolkit.) - [**](https://twitter.com/intent/tweet?source=https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit&text=Empowering%20Organizations%20with%20CISA's%20Cybersecurity%20Awareness%20Month%202023%20Toolkit%20-%20https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit&title=Empowering%20Organizations%20with%20CISA's%20Cybersecurity%20Awareness%20Month%202023%20Toolkit&summary=With%20the%20end%20of%20October%20just%20around%20the%20corner,%20that%20also%20means%20it%20is%20the%20end%20of%20Cybersecurity%20Awareness%20Month.%20The%20Cybersecurity%20and%20Infrastructure%20Security%20Agency%20(CISA)%20has%20taken%20a%20significant%20step%20in%20this%20direction%20by%20unveiling%20the%20Cybersecurity%20Awareness%20Month%202023%20Toolkit.) ## [Empowering Organizations with CISA's Cybersecurity Awareness Month 2023 Toolkit](https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit) With the end of October just around the corner, that also means it is the end of Cybersecurity Awareness Month. While the month might soon be over, cybersecurity issues and threats most certainly are not. The Cybersecurity and Infrastructure Security Agency (CISA), in partnership with the National Cybersecurity Alliance (NCA), has taken a significant step in this direction by unveiling the Cybersecurity Awareness Month 2023 Toolkit. This comprehensive resource is designed to empower organizations, IT professionals, and individuals with the knowledge and tools needed to navigate the complex world of cyber threats.   By [Patrick Kinsley](https://blog.seedspark.com/blog/author/patrick-kinsley) In: [Technology](https://blog.seedspark.com/blog/topic/technology) [**](https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit) - [**](https://www.facebook.com/sharer/sharer.php?u=https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety&title=Four%20Essential%20Steps%20to%20Enhance%20Your%20Online%20Safety&description=Whether%20you're%20an%20individual%20looking%20to%20protect%20your%20personal%20data%20or%20an%20IT%20professional%20tasked%20with%20safeguarding%20company%20information,%20there%20are%20fundamental%20steps%20you%20can%20take%20to%20enhance%20online%20safety.) - [**](https://twitter.com/intent/tweet?source=https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety&text=Four%20Essential%20Steps%20to%20Enhance%20Your%20Online%20Safety%20-%20https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety&title=Four%20Essential%20Steps%20to%20Enhance%20Your%20Online%20Safety&summary=Whether%20you're%20an%20individual%20looking%20to%20protect%20your%20personal%20data%20or%20an%20IT%20professional%20tasked%20with%20safeguarding%20company%20information,%20there%20are%20fundamental%20steps%20you%20can%20take%20to%20enhance%20online%20safety.) ## [Four Essential Steps to Enhance Your Online Safety](https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety) As cyber threats continue to evolve, both individuals and businesses must be proactive in their approach to cybersecurity. Whether you're an individual looking to protect your personal data or an IT professional tasked with safeguarding company information, there are fundamental steps you can take to enhance online safety. Here are four essential steps to consider:   By [Patrick Kinsley](https://blog.seedspark.com/blog/author/patrick-kinsley) In: [Technology](https://blog.seedspark.com/blog/topic/technology) [**](https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety) - [**](https://www.facebook.com/sharer/sharer.php?u=https://blog.seedspark.com/blog/secure-our-world-the-new-mantra-for-cybersecurity-in-2023&title=Secure%20Our%20World:%20The%20New%20Mantra%20for%20Cybersecurity%20in%202023%20and%20Beyond&description=As%20cyber%20threats%20continue%20to%20evolve,%20so%20must%20our%20approach%20to%20safeguarding%20our%20digital%20realm.%20Enter) - [**](https://twitter.com/intent/tweet?source=https://blog.seedspark.com/blog/secure-our-world-the-new-mantra-for-cybersecurity-in-2023&text=Secure%20Our%20World:%20The%20New%20Mantra%20for%20Cybersecurity%20in%202023%20and%20Beyond%20-%20https://blog.seedspark.com/blog/secure-our-world-the-new-mantra-for-cybersecurity-in-2023) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.seedspark.com/blog/secure-our-world-the-new-mantra-for-cybersecurity-in-2023&title=Secure%20Our%20World:%20The%20New%20Mantra%20for%20Cybersecurity%20in%202023%20and%20Beyond&summary=As%20cyber%20threats%20continue%20to%20evolve,%20so%20must%20our%20approach%20to%20safeguarding%20our%20digital%20realm.%20Enter) ## [Secure Our World: The New Mantra for Cybersecurity in 2023 and Beyond](https://blog.seedspark.com/blog/secure-our-world-the-new-mantra-for-cybersecurity-in-2023) As cyber threats continue to evolve, so must our approach to safeguarding our digital realm. Enter "Secure Our World" – the groundbreaking cybersecurity awareness program launched by the Cybersecurity and Infrastructure Security Agency (CISA). As we delve into 2023 and look towards the future, this initiative promises to redefine our understanding and approach to cybersecurity.   By [Patrick Kinsley](https://blog.seedspark.com/blog/author/patrick-kinsley) In: [Technology](https://blog.seedspark.com/blog/topic/technology) [**](https://blog.seedspark.com/blog/secure-our-world-the-new-mantra-for-cybersecurity-in-2023) ## Growth Is Just One Click Away Want to chat? Just share some project details and a member of our sales team will be in touch to learn more about your vision and how we can help!   ##### How can we grow together? [![Call Now](https://no-cache.hubspot.com/cta/default/1546797/e8917216-677b-4754-8a92-11da535e5577.png)](https://cta-redirect.hubspot.com/cta/redirect/1546797/e8917216-677b-4754-8a92-11da535e5577) ## Join Our Newsletter ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Taylor Dolinger", "url" : "https://blog.seedspark.com/blog/author/taylor-dolinger" }, "datePublished" : "2018-06-14T14:56:30.000Z", "headline" : "New Strain of Ransomware Encrypts Email Inboxes", "image" : [ "https://blog.seedspark.com/hubfs/180612_Ransomcloud_Blog-Banner.jpg" ], "mainEntityOfPage" : { "@id" : "https://blog.seedspark.com/blog/new-strain-of-ransomware-encrypts-email-inboxes", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.seedspark.com/hubfs/SS_Logo_R_Blue_Horizontal.svg" }, "name" : "SeedSpark" } } ```