An interesting ransomware variant which is reported to have the .8lock8 extension after it encodes the files of the user asking for ransom money is detected out into the open. It copies the behavior of another ransomware known as HiddenTear…
It appears that Ninja ransomware may be back and this time it uses ninja.gaiver@aol.com, kaligula.caesar@aol.com and seven_legion@india.com cyber-criminal addresses. The ransomware does not even use a ransom note, instead leaving the Ninja.Gaiver e-mail address on the files it encrypts. The…
A ransomware crypto-virus called Crypren popped up a couple of days ago. The virus will lock files and append an extension .encrypted to all of them. The ransom money that Crypren demands is around 45 US dollars. To see how…
Ransomware, called GNL Locker(German-Netherlands Locker) which uses the never seen before AES-512 encryption algorithm has been spotted out in the wild. The dangerous malware encrypts the user files adding a .locked file extension to them. After this, it has been…
Petya ransomware now spreads with a copy of itself – Mischa. Petya, as before, asks for admin privileges to encrypt the MBR, but now if that fails, Mischa ransomware is loaded, which encrypts files on the infected PC. Considering how…
The CryptoHitman ransomware has a new variant. Now it bears the name CryptoHitman, but its core is more or less the same. Instead of showing the puppet used in the “Saw” movies, the ransomware’s theme now is the Hitman character…
What Is GPCODE Ransomware? Users report activity by ransomware known as GPCODE. This particular virus uses a combination of a very strong encryption ciphers – RSA and AES, both used by the government to hide top secret files. Not only…
A week or so ago, researchers from Proofpoint uncovered their findings of a ransomware they named MM Locker. The ransomware encrypts files with the .locked extension. Rumor has it that some of the infections are caused by crack executables for…
The CryptXXX malware writers have designed a new version which has been reported to contain several drastic improvements in encrypting the files of unsuspecting victims. The ransomware encrypts users’ files after which locks the screen with the ransom message. This…
Attacks by a ransomware discovered in April that is reportedly associated with Russia, carrying the name Enigma, have been reported to be rapidly rising. This nasty cyber threat encrypts the files of users using a strong AES encryption algorithm after…
Shujin ransomware, written entirely in Chinese has been reported on security forum to infect unsuspecting users. The ransom note is written entirely in Chinese, and the encoded files are in the .txt file extension. This particular ransomware, like many others,…
Security researchers at Palo Alto Networks disclosed that an old ransomware family – Bucbi ransomware – has been just revived after 2 years of silence. The Bucbi threat was discovered in 2014, and it hasn’t been registered active since then.…
Ransomware cases usually follow the same pattern of infection and behavior. However, a recently detected ransomware proves that ransomware authors can be creative, too. The so-called CryptMix ransomware is operated by a group of individuals calling themselves the Charity Team.…
Recently, a ransomware that goes by the name of TrueCrypter surfaced. It can disable several Windows processes to increase its longevity. The ransomware encrypts files with the .enc extension. Around $100 is the sum of money asked as payment for…
Ransomware that uses different encryption techniques, named Mobef has been reported to ask ransom money to give infected users access to the files it encrypts on their computers. Unlike other ransomware infections, Mobef may employ the DES encryption algorithm, suggesting…
7ev3n ransomware has been updated with a brand-new variant. Now it bears the name 7ev3n-HONE$T and asks less money for payment. To remove this virus and see how you can try to decrypt your files, you should read the article…
Unlike other ransomware variants, this particular crypto-malware has an entirely different approach when it begins to extort users. Named Alpha ransomware by researchers, it drops a ransom note in every encrypted folder and demands 400 US dollars to be directly…
An old ransomware seems to have emerged once again. KeyBTC is the name of this ransomware as it appends the extension .keybtc@inbox_com to encrypted files. To remove the ransomware and see if you can restore your files, you should carefully…
Since the older version of DMA Unlocker, which was detected at the beginning of February encrypted files that were eventually able to be decrypted, expectedly enough we now see a newer version written by cyber-crooks which uses even more advanced…
Ransomware infections continue. Not only are new versions of well-known threats appearing, but also new ransomware cases are registered on a daily basis. One of the latest ransomware threats currently targeting users is dubbed Yakes. According to researchers, Yakes ransomware…
