Ransomware and other forms of malware usually start up with a phishing email. Most phishing emails are meant to relieve you of your login credential or drop some malware into your system.

Often the phishing email is meant to redirect you to a fake website where the crooks are trying to get your personal information.

There is a new trick making the rounds that tells you that you have received an important document and you need to visit a web page to view it. Once you are on the fake page, a pop-up asks for your login credentials. It doesn't specify which log in credential.

The page shows a blurred out document and the log in screen. Again, it doesn't specify which log in credentials they want, so it is up to the victim to choose anything from Intranet details to Google.



Source: Bleeping Computer