Well, that's elaborate
Posted: 2020-06-15 02:26
https://news.sophos.com/en-us/2020/05/2 ... -security/
In a recently detected attack, Ragnar Locker ransomware was deployed inside an Oracle VirtualBox Windows XP virtual machine. The attack payload was a 122 MB installer with a 282 MB virtual image inside—all to conceal a 49 kB ransomware executable.