guardicore/monkey

Ransomware wallpaper text may get cut

Open

#4005 opened on Jan 9, 2024

View on GitHub
 (0 comments) (0 reactions) (0 assignees)Python (6,250 stars) (752 forks)batch import
BugComplexity: MediumHelp wantedImpact: LowRansomware

Description

Describe the bug

Ransomware's wallpaper change feature for Windows sets the wallpaper with the same fit (stretched, filled, etc) that is already set on the system. This may result in some of the text in the wallpaper image being cut.

To Reproduce

Steps to reproduce the behavior:

  1. On a Windows machine, change the wallpaper fit to "Fill".

  2. Start the Island, enable the ransomware wallpaper change option in the Island.

  3. Run the Agent on the same machine.

  4. Check the wallpaper.

Expected behavior

All of the text should be readable. This could be fixed by changing the fit of the wallpaper.

Screenshots

image

Contributor guide