Power Worm is a Ransomware written in Windows PowerShell. It uses PowerShell for its payload. It encrypts a user’s files on a compromised computer and demands a ransom for decrypting them. Unfortunately, a newer variant of the Ransomware has a…
Traditionally, cryptography and its applications are defensive in nature, and provide privacy, authentication, and security to users (…) It can be used to mount extortion based attacks that cause loss of access to information, loss of confidentiality, and information leakage,…
Our 3-part article series continues with a detailed description and analysis of CTB-Locker. Jump to the first part dedicated to CryptoWall – the biggest ransomware family of 2015. CTB-Locker/ Critroni Ransomware Background Check Security researchers have observed thousands of cases…
If your files have been compromised and you have received a threatening message, similar to the one below in the form of a wallpaper, page on your web browser or a .txt file, there is a good chance you have…
Cryptowall 4.0 or a CryptoWall point release, it has definitely caught both victims and researchers by surprise. While security researchers are analyzing malware data compiled throughout 2015, the hacking team behind CryptoWall has released its latest version. The news of…
Unfortunately, the most devastating ransomware virus has already released a new version and has outrun our predictions for 2016. A prevalent number of researchers have labeled this latest variant CryptoWall 4.0, even though it’s still unclear whether it’s CryptoWall 4.0…
We’re all familiar with the Chimera ransomware and its infection methods. However, researchers have detected a new variant of the file encrypting threat that does more than just hold users’ files hostage. The latest Chimera ransomware combines scareware techniques with…
In a series of three articles, we will analyze the features of the ransomware families of Cryptowall, CryptoLocker and TorrentLocker. The three families have proven to be the most notorious ones, generating large amounts of money and affecting thousands of…
Ransomware is persistently making the headlines, and leaves no time for security researchers (like ourselves) to take a breath.Cryptowall 3.0, in particular, has been a real source of inspiration for experts, trying to break its encryption. However, Cryptowall 3.0 is…
It’s good to know that there are security professionals who are constantly seeking ways to fight back ransomware. The file encrypting monster has affected millions of people worldwide. Fortunately, researchers at Kaspersky Lab haven’t stopped working on ransomware solutions. They…
In case you have become a victim of file2@openmailbox.org ransomware you should not comply with the terms of the cyber criminals in any way. This particular ransomware virus is a devastating attack which is the reason of many inexperienced users…
In case your files have become unable to open and you have recieved a malicious message in the form of wallpaper, home page or screensaver or a text file including payment instructions to restore your files, you have become a…
The end of the year is near, and it’s time for some (scary) annual reports on cybercrime. Let’s see what the numbers are showing in terms of mobile security. As it turns out, mobile ransomware has turned into the most…
One of the tips on duty when dealing with a ransomware attack is not paying the amount, prevalently demanded in bitcoins. This tip has been around ever since ransomware attacks reached a peak in recent years. Malware researchers usually advise…
In case you have been infected by Trojan.Ransomcrypt.R, you may have a problem opening your files. Trojan.Ransomcrypt.R is a trojan horse from the Trojan.Ransomcrypt family and it aims to make money in return of decryption keys of encrypted user data.…
Trojan.Ransomcrypt.T appears to be the most dangerous out of all the Ransomcrypt variants infecting PCs everywhere. Security researchers strongly advise users to look for any .xtbl extensions on their files and in case they detect them to try and remove…
Trojan.Ransomcrypt is a Trojan horse that creates several different files in an infected computer and once it has control over the victim PC, scans for and encrypts imprortant data from the user. It has several different variants – T, S,…
JS.Fakeransom is a JavaScript Trojan recently detected by researchers at Symantec. Even though more information is needed to confirm the exact attack methods employed by JS.Fakeransom, our team has put together the primary features of JavaScript-based Trojans and threats. Keep…
Being hit by ransomware is a nightmare that all users should be scared of. Unfortunately, many ransomware victims have come to the conclusion that crypto malware works faultlessly and continues to affect thousands of users and enterprises on a daily…
A new ransomware Trojan attack has been detected recently. The threat is known as hairullah@inbox.lv. According to research, after the extortion Trojan has sneaked into the victim’s system, certain files will have the “.id-(10 random digits)_hairullah@inbox.lv” string. After the line…
