This article is created to help remove Globe Ransomware v1, v2 and v3 .WormKiller@india.com.xtbl and .[pingy@india.com] and decrypt files. Two very devastating ransomware variants of the famous JigSaw ransomware which was released as a service online have been successfully decrypted.…
Nuke ransomware virus is here and it aims to nuke any chance it’s victims have of seeing their files again, by encrypting them with a strong AES-256 bit cipher. The ransomware demands from affected users to contact the criminals at…
Ransomware virus that has been specifically designed to attack systems running OS’s for servers, like the Windows Server 2012 has been detected to cause infections and encrypt files on compromised server. ESG malware researchers have reported that this may be…
New version of the Razy ransomware virus, known by the name Krypte has been released and has begun encrypting files with what appears to be an AES cipher. The virus has been created exclusively for German users. The virus aims…
Princess Locker virus has recently been discovered by the malware researcher Michael Gillespie. The virus looks very much alike the Alma Locker ransomware. The methods of infection are still unknown, but since this could be a variant of Alma, the…
Locky ransomware continues to evolve. The new extension .ODIN is placed as an appendix to the original file extension names after they get encrypted. The cryptovirus seeks to encrypt nearly 400 different file types. As the ransom note states, data…
Virlock ransomware has apparently been updated and is now capable of propagating itself via the cloud. Hence, the ransomware can be spread negligently from one infected to another, eventually file-locking an entire network. This update seen in the code of…
New variant of the Samas ransomware has been reported to demand the sum of 1.7 bitcoins after it uses RSA encryption to encipher files of infected computers, adding the .iloveworld file extension to them. The ransomware then drops a PLEASE_READ_FOR_DECRYPT_FILES_{number}.html…
Locky ransomware is back with a new variant. This time, it encrypts files by adding the extension .ODIN to every file that ends up being locked in the process. The ransom note says that the encryption which is used is…
Also known as MarsJoke ransomware, this malware is everything but a joke. It uses a strong AES-256 encryption algorithm to encode the files of an infected computer. The virus is deemed to be widespread and very dangerous, primarily because of…
A new cryptovirus is on the loose. Discovered by the malware researcher Michael Gillespie, it is observed that it is themed around the Harry Potter novels. The ransomware uses a file named “voldemort.horcrux”, thus it is dubbed Voldemort ransomware. The…
A ransomware crypto-virus that goes by the name of MotoxLocker was discovered by researchers from the MalwareHunterTeam. They claim that the virus is a new variant of the DetoxCrypto ransomware and that it uses the AES algorithm for encryption. Locked…
New ransomware virus, named UnblockUPC has been detected by malware researchers to encrypt files with AES-128 encryption and ask 0.18 BitCoins as ransom money. The virus infects computers via different methods, such as e-mail spam after which uses the abovementioned…
A vbs-script using ransomware virus, named Cyber SpLiTTer has been created to ask 1 BTC from users that have been infected by it. What is interesting about this virus is that it was created by the Cerber model since just…
AES encryption algorithm is being used by a ransomware virus, named SuperCrypt which encrypts the files of it’s victims. The virus has been reported to also add the .SUPERCRYPT file extension to the files which it enciphers. The enciphered files…
Torrent files – the sole reason you may be able to watch newly released movies for free. However, torrent websites are often full of various uploaders who add a little bonus to what they upload, such as malicious files, containing…
If you download torrents, this news definitely concerns you. InfoArmor researchers have just disclosed Raum – a tool employed by Eastern European organized cybercrime group Black Team to spread malware via malicious torrents. The malware currently distributed in the campaign…
A very experienced malware researcher, going by the nickname hasherezade (@hasherezade) has released decryption instructions for the victims of DMA Locker ransomware. The 3rd variant of this ransomware virus has been first detected back in May, and when it was…
Usr0@riseup.net is the e-mail address associated with a very dangerous crypto virus that aims to extort users for 1.24 BTC (or 50500 RU), holding their files hostage. The ransomware virus uses the .usr0 file extension to add to the files…
A dangerous ransomware virus was encountered by malware researchers last week, dubbed FenixLocker and using the .centrumfr@india.com!! file extension which it adds to files encrypted with AES encryption algorithm. Not only this, but the virus is also reported to leave…
