Ventsislav is a cybersecurity expert at SensorsTechForum since 2015. He has been researching, covering, helping victims with the latest malware infections plus testing and reviewing software and the newest tech developments. Having graduated Marketing as well, Ventsislav also has passion for learning new shifts and innovations in cybersecurity that become game changers. After studying Value Chain Management, Network Administration and Computer Administration of System Applications, he found his true calling within the cybersecrurity industry and is a strong believer in the education of every user towards online safety and security.
A ransomware virus dubbed NullByte was reported by malware researchers to append the _nullbyte file extension to the files which it encrypts with a strong AES cipher. The name nullbyte originates from the NUL character in ASCII control code, suggesting…
A crypto-virus, known by the e-mail Cyber_Baba2@aol.com and also known as CPYPAURA variant at TrendMicro’s threat encyclopedia, has been reported to have a high level of infections. The virus encrypts the files of users who have been infected by it,…
This article will help you remove .cerber3 file extension virus (Locky ransomware) successfully. Follow the ransomware removal instructions below. One of the most devastating viruses out there – Cerber ransomware has been released in a 3rd version, adding a .cerber3…
A hijacking software associated with the suspicious search engine, reffered to as Ustarts.xyz has been reported by malware researchers. The potentially harmful program may collect user information, cause browser redirects and heavily modify the settings of the web browsers Google…
A very hazardous web domain Fastlauncher.xyz has been reported to cause an extensive amount of redirects to different third-party websites of suspicious character on the computers of affected users. The hijacking software associated with the website can collect different information…
A new ransomware virus has been reported to cause damage to web servers based on Linus. This virus, dubbed Fairware, does not use a direct encryption approach. Unlike other ransomware for web servers, the malware directly eliminates the web folder…
The malware writers behind the Locky and Zepto ransomware projects proved once again that they are working all the time not only to infect more and more users and remain on top of the ransomware chart, but they are also…
Ransomware virus that encrypts the files on the infected computer, dubbed the KK virus because of the file extension it uses (KK_) has been reported to infect users on a massive scale. The virus uses a powerful encryption algorithm, which…
The HiddenTear project has been the reason for yet another virus that encrypts user files adding the .domino file extension. Dubbed Domino ransomware, this crypto-virus spreads primarily via several different techniques, the main of which is via fake installers and…
Another ransomware virus belonging to the CrySiS (.XTBL) ransomware variants has been reported to encrypt user files by ESG malware researchers. The ransomware virus creates a malicious executable in the %SystemDrive% folder of Windows which is then used to encrypt…
A ransomware infection, named by the mythical beast Chimera was spotted by ESG malware researchers to encrypt vital documents, pictures, videos, audio files and other of the computers it infects. The Chimera virus also deletes the backup of those files…
A ransomware virus that is a part of the XTBL/CrySiS malware group has been reported to infect users. Dubbed Malevich, the virus may use a powerful AES-128 encryption algorithm to encode the files of the infected computers asking the users…
Another virus belonging to the family of XTBL/CrySiS ransomware has emerged, infecting users massively. The malware may use a strong combination of several encryption algorithms to encode the data. It may employ different strengths of AES encryption directly on the…
File extensions .better_call_saul;.breaking bad;.heisenberg;.xtbl;.ytbl are just some of the expansions associated with the nasty Shade ransomware virus. There have been many variants ever since one of the first CrySiS variant has appeared, and many have the reason to believe that…
Ransomware virus belonging to the Troldesh ransomware viruses called VeraCrypt@india.com virus has been detected by ESG malware researchers to cause infections and run on system startup. Being part of the XTBL ransomware variants the Veracrypt@india.com virus is created to generate…
Another variant of the many Troldesh ransomware variants leaving the e-mail Grand_car@aol.com has been detected in the wild. The ransomware virus is reported to use an advanced AES encryption algorith with 128-bit strength, the decryption for which is reported to…
Ransomware virus associated with the e-mail address Meldonii@india.com has been spotted out in the wild. Researchers have identified this virus to have associations with the XTBL and CrySiS ransomware variants. This automatically points out that Meldonii@india.com Ransomware may use AES…
Malware researchers have identified a string associated with the XTBL viruses, dubbing it Sitaram108@india.com ransomware virus. It uses the .xtbl file extension and similar to other XTBL viruses may use the AES and RSA ciphers to encrypt files of affected…
A ransomware threat that is a part of the many .XTBL variants has appeared, and it has begun infecting users worldwide. It uses a strong encryption algorithm to encipher the files of its victims on system startup. The aim of…
Yet another ransomware virus has appeared, belonging to the notorious .XTBL ransomware variants. The malware has been the reason for report that it aims to encrypt the files of affected users. It may use AES encryption to encode the files…
