Ransomware variation, associated with the e-mail centrumfr@india.com has been reported by malware researchers to use encryption to lock users out of their files and then leave a ransom note. The ransom note is named “Help to decrypt.txt” and it is…
A ransomware crypto-virus that calls itself Black Feather was recently found by the malware researcher Michael Gillespie. The virus is based on the popular HiddenTear open-source project and uses the AES encryption algorithm to lock files on a compromised computer.…
A ransomware virus has been detected by the name of “Dev-Nightmare”. The virus uses the .2xx9 file extension after it performs a successful attack on a compromised computer and encrypts t’s files. The files, besides having the abovementioned file extension…
A brand new variant of the Fantom crypto-virus is on the loose. The virus has been reported to encrypt files with over 1200 different extensions. Now it appends the extension .locked to the files, ditching the previous .locked extension. Ransom…
Atom is the new name given to the Shark ransomware project. The cybercriminals behind it rebranded it in an attempt to clear their bad reputation as they scammed other crooks who bought Shark ransomware. Atom is a ransomware-as-a-service (RaaS) and…
A ransomware virus using .cryptocat as a file extension after it encodes the files of affected users with a strong RSA-2048 algorithm has been detected. The virus also leaves a ransom note in a “Your files are locked !.txt” file,…
New Ransomware virus called Mamba also known as HDDCryptor has been discovered via a malicious files, named “141.exe” and “152.exe” that uses AES encryption to fully encrypt a hard drive and not let users to even boot Windows. This new…
Thanks to ransomware researchers who like to reverse-engineer viruses, more decrypters have been released for more of the file-encryption viruses. The sole reason behind those decryptors is the poor coding of their creators. This allowed malware analysts to reverse the…
LockLock appears to be another ransomware cryptovirus that is based on the open-source EDA2 project. The virus encrypts a victim’s files and puts up a ransom note with contact details. When encryption is complete, the ransomware places the extension .locklock…
A ransomware variant belonging to the Detox ransomware viruses, called Crypt0 Ransomware has appeared recently on the malware radar, using the _crypt0 file extension after encrypting the files of users. The virus is poorly coded and drops a ransom note,…
Shortly after the Philadelphia ransomware virus came out, a decryptor for it has been released by malware researchers. When it was spotted, the ransomware has been released for 400$ on the black market. The page advertising the virus outlined it…
A nasty virus, called CryPy, reported to use the Python language for it’s script has been detected by malware researchers, using AES-256 cipher to encode files. The encryptes files by this virus have the .cry file extension and in addition…
A new variant of the Stampado ransomware – the Philadephia virus has been released to the public using the .locked file extension. The virus has been sold in the deep web markets as an inexpensive virus that can encrypt the…
Ransomware is quickly becoming a major threat in the cyber space since it’s easy to use, hard to track and decrypt and the ROI is high. As a result, it’s evolving and improving with horrific speed. Cry ransomware, for example,…
Cyber crooks have brought Bart ransomware virus back in the game – this time it’s called Bart v2.0 (also Bart2) and appends encrypted files with the .bart2 extension. Bart v2.0 is considered an improved version from its predecessor Bart, for…
A ransomware virus that attacks the files of it’s victims only to archive them in password protected .ZIP files has been reported to wreak havoc on user computers. The virus moves all of the archived files in a RarVault folder…
Ransomware, created mainly for Russian speaking users, named KawaiiLocker has been reported to increasingly infect more and more users. The virus locks the files of the infected computer by encrypting them and asks the victim to pay approximately 6000 rubles…
A ransomware virus going by the name N1N1N1 has been reported to use a very stron encryption algorithm to encode the files of unsuspecting users. The virus leaves behind the .n1n1n1 file extension to every file it has encrypted along…
Ransomware virus, resembling very much TeslaCrypt and Locky ransomware, named Ransomcuck has been reported to lock affected users’ files using the AES and RSA encryption algorithms. The virus uses the .ransomcuck and .cuck file extensions after it enciphers the files…
A ransomware virus, carrying the name Flyper, based on the HiddenTear virus project has been caught out in the wild to infect user PCs. The virus uses a very strong RSA-2048 file encryption mechanism to encipher the files of unsuspecting…
