There is a ransomware named CryptoHost. The ransomware collects files with different extensions and locks them in an archive with a password. To see the solution of how to restore your files and remove the ransomware, you should read the…
A ransomware called Salam! emerged recently. At first, it infected people from Lithuania, but now it has started to spread. The ransom asks a payment of one Bitcoin within the first 24 hours after encryption. Each day the ransom is…
A new worm has been detected in the wild. The cyber-threat has been reported to replicate via infected USB drives from the computers it has affected through malicious URLs. It locks the screen of the user displaying a ransom message…
Ransomware keeps gaining popularity and with it, the copycat variants also increase. One of those variants Is called Zeta. It creates several malicious files after which it encrypts the data on the compromised computer appending a custom extension ending in…
Apparently, Trump supporters are being targeted by – well – Trump ransomware. Cyber criminals behind ransomware threats aim at variety of victims – both domestic users and enterprises. For a first time, however, we have discovered a politically biased ransomware…
Ransomware keeps growing in popularity amongst cyber-criminals since it has proven its effectiveness using military grade encryption to extort users on a daily basis. One of the newest ciphering malware which has been discovered encrypts the user files with a…
Websites using the Magento platform have been hit by ransomware. Once infected, the sites are deemed unusable. The ransomware is called KimcilWare and encrypts webserver files. After encryption, it adds its index file on victim servers that can be viewed…
Ransomware – it is the new way of making money via using the malicious creations of dark web coders. One particular crypto-malware variant has the audacity to pretend even to be helpful and nice to you while using AES and…
We won’t be exaggerating if we say that every day we wake up to a new ransomware piece just detected in the wild. Unfortunately, every new ransom is worse than its predecessor – more malicious, sophisticated and damaging. To make…
Ciphering attacks by a new ransomware variant have been increasing lately. They seem to be linked to two email addresses known as unblocked@email.su and undblocked@tuta.io. The ransomware uses conventional for ransomware scripts to encode the user files with its modules…
A new devastating ransomware and it’s variants have been reported to infect users on a global scale. It’s name is Coverton, and it is reported to use several extensions that it ads after data encryption. One of the extensions is…
Update! Research indicates that current versions of PowerWare append the .locky file extension to the victim’s encrypted files, drop the same ransom notes as Locky, and even use the same graphics and phrases on their ransom payment site. The good…
A new type of Lockscreen Trojan that belongs to the Police variants has been discovered out in the wild. The malware arrives directly from foreign hosts, creates multiple files and registry objects. After this it restricts the user access to…
Update! A researcher from Heise Security, Fabian Scherschel gave an analysis report of the ransomware, in German. In there it is written that the first phase encryption used by Petya is a simple set value XOR of the Master Boot…
Update! Apparently, a new variant of this ransomware has been spotted in the wild. The new variant bears the name of Rush ransomware and encrypts files with a .crashed extension. For more detailed information, take a closer look at the…
A very well concealed and effective ransomware has been reported to encrypt user files with the .rokku file extension. It is known as Rokku Ransomware, and its malicious files have a very low detection rate by antivirus software. Users who…
Another ransomware has been reported to wreak havoc on a massive scale. It is known as MakTub Locker and it encrypts the user files with a strong cypher. The crypto-malware then leaves a ransom note giving the user a deadline…
A new Android Lockscreen type of ransomware which belongs to the police impersonator viruses has been detected out in the wild. The questionable Trojan enters through users via suspicious applications or by visiting malicious web links via your phone. What…
A new ransomware, carrying the vulgar name of its ransom email address, redshitline@india.com has been reported to be massively spread. It encrypts the user files with a strong cypher and uses the ransom email plus a .xtbl file extension after…
The fourth “installment” of TeslaCrypt is here to terrorize you and make your day a lot worse. The crypto-malware now uses significantly stronger encryption. Not only this, but TeslaCrypt 4 also has fixed bugs and is now able to encrypt…
