Petya ransomware now spreads with a copy of itself – Mischa. Petya, as before, asks for admin privileges to encrypt the MBR, but now if that fails, Mischa ransomware is loaded, which encrypts files on the infected PC. Considering how…
The CryptoHitman ransomware has a new variant. Now it bears the name CryptoHitman, but its core is more or less the same. Instead of showing the puppet used in the “Saw” movies, the ransomware’s theme now is the Hitman character…
What Is GPCODE Ransomware? Users report activity by ransomware known as GPCODE. This particular virus uses a combination of a very strong encryption ciphers – RSA and AES, both used by the government to hide top secret files. Not only…
A week or so ago, researchers from Proofpoint uncovered their findings of a ransomware they named MM Locker. The ransomware encrypts files with the .locked extension. Rumor has it that some of the infections are caused by crack executables for…
The CryptXXX malware writers have designed a new version which has been reported to contain several drastic improvements in encrypting the files of unsuspecting victims. The ransomware encrypts users’ files after which locks the screen with the ransom message. This…
Attacks by a ransomware discovered in April that is reportedly associated with Russia, carrying the name Enigma, have been reported to be rapidly rising. This nasty cyber threat encrypts the files of users using a strong AES encryption algorithm after…
Shujin ransomware, written entirely in Chinese has been reported on security forum to infect unsuspecting users. The ransom note is written entirely in Chinese, and the encoded files are in the .txt file extension. This particular ransomware, like many others,…
Security researchers at Palo Alto Networks disclosed that an old ransomware family – Bucbi ransomware – has been just revived after 2 years of silence. The Bucbi threat was discovered in 2014, and it hasn’t been registered active since then.…
Ransomware cases usually follow the same pattern of infection and behavior. However, a recently detected ransomware proves that ransomware authors can be creative, too. The so-called CryptMix ransomware is operated by a group of individuals calling themselves the Charity Team.…
Recently, a ransomware that goes by the name of TrueCrypter surfaced. It can disable several Windows processes to increase its longevity. The ransomware encrypts files with the .enc extension. Around $100 is the sum of money asked as payment for…
Ransomware that uses different encryption techniques, named Mobef has been reported to ask ransom money to give infected users access to the files it encrypts on their computers. Unlike other ransomware infections, Mobef may employ the DES encryption algorithm, suggesting…
7ev3n ransomware has been updated with a brand-new variant. Now it bears the name 7ev3n-HONE$T and asks less money for payment. To remove this virus and see how you can try to decrypt your files, you should read the article…
Unlike other ransomware variants, this particular crypto-malware has an entirely different approach when it begins to extort users. Named Alpha ransomware by researchers, it drops a ransom note in every encrypted folder and demands 400 US dollars to be directly…
An old ransomware seems to have emerged once again. KeyBTC is the name of this ransomware as it appends the extension .keybtc@inbox_com to encrypted files. To remove the ransomware and see if you can restore your files, you should carefully…
Since the older version of DMA Unlocker, which was detected at the beginning of February encrypted files that were eventually able to be decrypted, expectedly enough we now see a newer version written by cyber-crooks which uses even more advanced…
Ransomware infections continue. Not only are new versions of well-known threats appearing, but also new ransomware cases are registered on a daily basis. One of the latest ransomware threats currently targeting users is dubbed Yakes. According to researchers, Yakes ransomware…
Researchers from Proofpoint have revealed information about a ransomware called CryptFile2. They have given it this name, because of one of its malware samples. Proofpoint share that the ransomware has started raging in the middle of March, this year. The…
Locky ransomware has already affected thousands of users. Unfortunately, the threat is not nearly done with its infections, as new, more dangerous methods of distribution were just reported by security researchers at TrendMicro. The new techniques include the already known…
It’s official! A new TeslaCrypt version has been just detected by security researcher BloodDolly, who has dedicated his time investigating the ransomware and searching for decryption methods. TeslaCrypt Version 4.2 Analysis and Description TeslaCrypt Version 4.2 has some changes in…
A new javascript type of ransomware has been reported to infect users globally. This crypto malware is particularly devastating because it uses an immensely strong cypher to encrypt the files of affected users, making them impossible to decrypt directly even…
