New version of Philadelphia ransomware, which was part of the Stampado variants has been released, again using the same .locked file extension. The difference in this version is that it demands .3 BTC from affected victims and features a new…
“Try to kill or delete me and I will kill your PC” – this is the message the victims of the EXOTIC virus see once their computer has been infected by it. The vulgar cyber-threat goes as far as creating…
A new form of crime has been rapidly increasing. Botnets, banking malware, legitimate malware (adware) and other bunches of malicious code that aim only for one – profit. The most profitable of those however remains to be the new form…
Venis ransomware is a cryptovirus that is currently in its development phase. Recently found by malware researchers, this virus is believed to be soon released as a fully functional ransomware. The cryptovirus already has a page set with the name…
The virus that has been reported to use an .NCRYPT extension and leave a threatening ransom note may have already begun to infect users from different places all over the world. The crypto virus demands infected users to pay the…
A ransomware virus, known as Deadly has been detected by malware researchers recently. The virus was reported to create several different files on the computer after which encrypt the important data in it and drop a ransom note demanding $500…
First discovered in May, Enigma ransomware targeted only Russian users. This virus, however, has been released in a new variant that may attack users on a global scale if distributed massively. The new version of Enigma ransomware uses “enigma_info.txt” file…
A crypto-virus, dubbed as APT Ransomware requesting it’s victims to pay with Coinbase or Blockchain has appeared out into the open, encrypting files and adding .dll extension after it has completed encryption. APT Ransomware 2.0 also drops a ransom note…
Kostya is the name of a Czech ransomware cryptovirus. The ransom message that it displays is written in the Czech language and has a skull with the name “Kostya” shown on top. The virus claims in this ransom note that…
RESTORE-FILES!_{ID}_.txt – this is what users who have been affected by Comrade Circle ransomware see after their files have been encrypted with an added .comrade file extension to them. The Comrade Circle virus does not waste any time In explaining…
A ransomware using the .raid10, .blt, .globe, .encrypted, .mia.kokers@aol.com file extensions and believed to be a variant of JigSaw crypto viruses has been reported to cause new infections in a second, updated version. The updated version of globe uses the…
Researchers at Proofpoint have previously identified a ransomware virus, known as Hades Locker. The virus mimics the notorious Locky ransomware’s ransom note; however, researchers are still not convinced whether or not this is Locky. The researchers believe that the HadesLocker…
Another Fsociety themed ransomware virus is on the loose. The name is based on that of the hacker ring in the popular TV show “Mr. Robot” and is written in a semi-leet format – Fs0ci3ty. This cryptovirus will encrypt your…
HadesLocker is the name of a recently found ransomware cryptovirus which gives you a week to pay one Bitcoin. If you do not meet this criterion the price for decryption will be two Bitcoins. The malware researcher Michael Gillespie reported…
A lot has happened since we released the previous part with ransomware decryption instructions. Many viruses which were initially thought to be impenetrable have been decoded and brought new hope for those who do not want to pay money to…
A ransomware cryptovirus called KillerLocker was recently discovered in the wild. The ransom note it shows is written in Portuguese and gives 48 hours for victims to contact the cybercriminals. The virus states in its ransom message that it uses…
JokeFromMars, also known as MarsJoke ransomware uses AES cipher to encrypt files, adding the .a19 and .ap19 file extension to them. The ransomware virus demands 0.7 or 1.1 BTC (depending on it’s variant) payment to cyber-criminals. The good news is…
A new ransomware virus spreads through the Remote Desktop Protocol (RDP) found on many computer systems. Its real name is Xpan, but many victims and some researchers refer to it as TeamXRat ransomware. The name TeamXRat comes from the cybercriminals…
Ransomware infection, calling itself CryptoLockerEU 2016 uses the “.send 0.3 BTC crypt” file extension which it adds to files it encrypts on infected computers. This is the first case we’ve seen where the ransom money demanded are included in the…
This is an instructive article to help you remove Cerber README.hta Ransomware and restore encrypted files. Cerber ransomware virus has appeared out into the wild in a new variant using a README.hta file, according to malware researcher Michael Gillespie. What…
