"The attack code is inserted in GandCrab 4.21 and 4.3 version, and it is executed after infecting normal files," AhnLab Director Changkyu Han told Bleeping Computer. "Our product is detecting the GandCrab ransomware before reaching the BSOD attack code. So, the BSOD attack code has very low chances on being executed."