A crypto-virus, known by the e-mail Cyber_Baba2@aol.com and also known as CPYPAURA variant at TrendMicro’s threat encyclopedia, has been reported to have a high level of infections. The virus encrypts the files of users who have been infected by it,…
If your PC has been attacked by CryptFuck ransomware virus, read this article carefully before you take any further actions. CryptFuck virus has just been released and spotted by malware researchers. It’s based on the open-source of the Hidden Tear…
Cerber3 ransomware virus is already a fact, as accountable by several tweets by security researchers. The crypto virus is most likely appending the .cerber3 extension to victims’ encrypted files. The ransom note is titled # HELP DECRYPT #.txt. Not too…
This article will help you remove .cerber3 file extension virus (Locky ransomware) successfully. Follow the ransomware removal instructions below. One of the most devastating viruses out there – Cerber ransomware has been released in a 3rd version, adding a .cerber3…
Ransomware virus that encrypts the files on the infected computer, dubbed the KK virus because of the file extension it uses (KK_) has been reported to infect users on a massive scale. The virus uses a powerful encryption algorithm, which…
The HiddenTear project has been the reason for yet another virus that encrypts user files adding the .domino file extension. Dubbed Domino ransomware, this crypto-virus spreads primarily via several different techniques, the main of which is via fake installers and…
Malware researchers have just spotted Space_rangers@aol.com ransomware virus to infect users and encrypt their files asking for a payment in exchange for a decryption key. We strongly advise users to not pay the cyber criminals as this is not a…
One of the many ransomware variants of the Shade/Troldesh family is called Centurion_Legion@aol.com. This is a recently discovered version that has started to plague computer users worldwide. It uses an advanced encryption algorithm to store most user files and folders…
Another ransomware virus belonging to the CrySiS (.XTBL) ransomware variants has been reported to encrypt user files by ESG malware researchers. The ransomware virus creates a malicious executable in the %SystemDrive% folder of Windows which is then used to encrypt…
A ransomware infection, named by the mythical beast Chimera was spotted by ESG malware researchers to encrypt vital documents, pictures, videos, audio files and other of the computers it infects. The Chimera virus also deletes the backup of those files…
What Is Fantom Ransomware? Fantom ransomware is a new crypto-virus that is based on the open-source EDA2 project. The virus locks files and claims to use the RSA-4096 and AES-256 algorithms for their encryption. When the encryption is complete, the…
A ransomware virus that is a part of the XTBL/CrySiS malware group has been reported to infect users. Dubbed Malevich, the virus may use a powerful AES-128 encryption algorithm to encode the files of the infected computers asking the users…
Another virus belonging to the family of XTBL/CrySiS ransomware has emerged, infecting users massively. The malware may use a strong combination of several encryption algorithms to encode the data. It may employ different strengths of AES encryption directly on the…
Ramachandra7@india.com is the full name of this crypto-virus. The name comes from the email that is left for contacting the makers of the virus. It can safely be called an XTBL ransomware because it is part of the Troldesh/Shade family…
A_princ@aol.com is the name of this particular ransomware crypto-virus, because it uses that email address in its ransom message. Lots of viruses from the Troldesh/Shade ransomware family have been seen in the past couple of days. This virus will put…
File extensions .better_call_saul;.breaking bad;.heisenberg;.xtbl;.ytbl are just some of the expansions associated with the nasty Shade ransomware virus. There have been many variants ever since one of the first CrySiS variant has appeared, and many have the reason to believe that…
Ransomware virus belonging to the Troldesh ransomware viruses called VeraCrypt@india.com virus has been detected by ESG malware researchers to cause infections and run on system startup. Being part of the XTBL ransomware variants the Veracrypt@india.com virus is created to generate…
Open-source ransomware is a real issue which is continuously evolving. Over the past few weeks, researchers have caught three open-source crypto virus strains, based on Hidden Tear and EDA2. What all of the three strains have in common is that…
A variant of the Troldesh/Shade ransomware virus family has been spotted recently. The virus has been dubbed Drugvokrug727 because it uses the Drugvokrug727@india.com email address. The wallpaper placed on a compromised computer features a digital sketch of the main character…
Another variant of the many Troldesh ransomware variants leaving the e-mail Grand_car@aol.com has been detected in the wild. The ransomware virus is reported to use an advanced AES encryption algorith with 128-bit strength, the decryption for which is reported to…
