To distribute this ransomware, cybercriminals hack legitimate websites to add JavaScript code. Visitors to the sites receive a pop-up prompt to update their Chrome browsers, if they want to continue viewing the page. Downloading the “Chrome Font Pack” infects the users’ system. This attack is named after the Russian word for “spore.” Inception: January 2017; Attack vector: Bogus Front Pack Update in a Browser Message
