If your files have been compromised and you have received a threatening message, similar to the one below in the form of a wallpaper, page on your web browser or a .txt file, there is a good chance you have…
Cryptowall 4.0 or a CryptoWall point release, it has definitely caught both victims and researchers by surprise. While security researchers are analyzing malware data compiled throughout 2015, the hacking team behind CryptoWall has released its latest version. The news of…
Unfortunately, the most devastating ransomware virus has already released a new version and has outrun our predictions for 2016. A prevalent number of researchers have labeled this latest variant CryptoWall 4.0, even though it’s still unclear whether it’s CryptoWall 4.0…
We’re all familiar with the Chimera ransomware and its infection methods. However, researchers have detected a new variant of the file encrypting threat that does more than just hold users’ files hostage. The latest Chimera ransomware combines scareware techniques with…
In a series of three articles, we will analyze the features of the ransomware families of Cryptowall, CryptoLocker and TorrentLocker. The three families have proven to be the most notorious ones, generating large amounts of money and affecting thousands of…
Ransomware is persistently making the headlines, and leaves no time for security researchers (like ourselves) to take a breath.Cryptowall 3.0, in particular, has been a real source of inspiration for experts, trying to break its encryption. However, Cryptowall 3.0 is…
It’s good to know that there are security professionals who are constantly seeking ways to fight back ransomware. The file encrypting monster has affected millions of people worldwide. Fortunately, researchers at Kaspersky Lab haven’t stopped working on ransomware solutions. They…
In case you have become a victim of file2@openmailbox.org ransomware you should not comply with the terms of the cyber criminals in any way. This particular ransomware virus is a devastating attack which is the reason of many inexperienced users…
In case your files have become unable to open and you have recieved a malicious message in the form of wallpaper, home page or screensaver or a text file including payment instructions to restore your files, you have become a…
The end of the year is near, and it’s time for some (scary) annual reports on cybercrime. Let’s see what the numbers are showing in terms of mobile security. As it turns out, mobile ransomware has turned into the most…
One of the tips on duty when dealing with a ransomware attack is not paying the amount, prevalently demanded in bitcoins. This tip has been around ever since ransomware attacks reached a peak in recent years. Malware researchers usually advise…
In case you have been infected by Trojan.Ransomcrypt.R, you may have a problem opening your files. Trojan.Ransomcrypt.R is a trojan horse from the Trojan.Ransomcrypt family and it aims to make money in return of decryption keys of encrypted user data.…
Trojan.Ransomcrypt.T appears to be the most dangerous out of all the Ransomcrypt variants infecting PCs everywhere. Security researchers strongly advise users to look for any .xtbl extensions on their files and in case they detect them to try and remove…
Trojan.Ransomcrypt is a Trojan horse that creates several different files in an infected computer and once it has control over the victim PC, scans for and encrypts imprortant data from the user. It has several different variants – T, S,…
JS.Fakeransom is a JavaScript Trojan recently detected by researchers at Symantec. Even though more information is needed to confirm the exact attack methods employed by JS.Fakeransom, our team has put together the primary features of JavaScript-based Trojans and threats. Keep…
Being hit by ransomware is a nightmare that all users should be scared of. Unfortunately, many ransomware victims have come to the conclusion that crypto malware works faultlessly and continues to affect thousands of users and enterprises on a daily…
A new ransomware Trojan attack has been detected recently. The threat is known as hairullah@inbox.lv. According to research, after the extortion Trojan has sneaked into the victim’s system, certain files will have the “.id-(10 random digits)_hairullah@inbox.lv” string. After the line…
A nasty ransomware infection, called Chimera is reported by ESG security analysts to affect victims’ computers and take their important files hostage. Like other typical ransomware trojans, the software encrypts important documents, pictures, videos or other files that are important…
Ransomware has turned out to be a most effective way to make money online. Many of the recently detected ransomware threats share the same basics, with slight differences such as the targeted files and encryption keys used. Shade Ransomware also…
Ninja Ransomware is a malware infection originating from Russia that is reported by ESG analysts to encrypt user files with the sole purpose of extorting users or money. The ransomware leaves a ransom note that promises to delete the decryption…
