A ransomware virus associated with the e-mail helprecover@ghostmail.com that leaves files, named _HOW_TO_DECRYPT on the victim’s computer and adds .encrypted file extension after it encodes the files of infected users has appeared, researchers report. The virus-encoder has been reported to…
Security researchers recently came across a new ransomware piece posing as a Windows activation window – ‘Your Windows Licence has Expired’ ransomware. This ransomware, however, is slightly different than your average crypto virus. Instead of a ransom measured in Bitcoins,…
Update! According to reports of users the Cerber2 ransomware doesn’t seem to seek for temporary files (.tmp). That makes possible for the recovery of some recent .doc and .xls files by just opening their .tmp counterpart files. The talking ransomware…
The simultaneous greylisting of applications and removal of local admin rights works as the best protection against ransomware. This is the result of a study executed by CyberArk Labs, published in August 2016. The company tested more than 23 000…
Ransomware, named VenusLocker, using AES-256 and RSA-2048 ciphers to encrypt files of infected computers has appeared in the wild, leaving the encoded objects with a .Venusf extension added to them. To purchase back their files, the users are given instructions…
AES algorithm, used by a ransomware virus, called Razy had been identified by malware researchers. The ransomware uses its distinct .razy file extension which it adds to the files of your computer once it encrypts them, making them no longer…
Uyari is the name given to a new ransomware crypto-virus, which is believed to be targeting Turkish users as the ransom note is written in Turkish. That does not exclude the possibility of others being targeted and infected by the…
The Jigsaw ransomware continues to have more variants. The latest one puts the extension .xyz to encrypted files. The crypto-virus can encrypt more than 120 file extensions, as previous variants did, and will create a ransom note afterward. The theme…
R980 is a ransomware virus, which encrypts databases, documents, photos and other files. It wants half a Bitcoin as a ransom payment, which amounts to nearly 330 US dollars. The files get encrypted with AES 256-bit and RSA4096 encryption algorithms…
We may not think of cyber crime as a “business sector” that also generates rivalry, but it doesn’t mean that cyber crime groups do not compete with each other. Having said that, it shouldn’t be too surprising that the author…
JagerDecryptor – this is what victims of the Jager ransomware see after their files have been encoded using a strong AES-256 and RSA-2048 encryption ciphers. This type of ransomware attacks has increased in both numbers and sophistication. The cyber-criminals behind…
A virus, belonging to the HiddenTear project, named Rush has continued to infect user PCs, adding the .crashed file extension after it encrypts their files. The virus is almost identical with Sanction ransomware with differences being the name, encryption and…
Ransomware, named Moth, because it uses the file extension .m0th is the sole reason of users complaining in online forums. The ransomware uses an extremely strong AES-256 encryption algorithm to encipher the files of users, rendering them unusable and unable…
NoobCrypt is a ransomware virus, which encrypts files and wants different currency as payment for ransom. The ransomware calls you a noob if you input a wrong decryption key. To remove the ransomware and see how to restore your files,…
A very interesting ransom virus, named Tilde has been detected to add the .~ (tilde sign) file extension to the files it encrypts. It uses a very strong AES encryption and demands 0.8 BTC from infected users. Tilde ransomware also…
CryptoWall’s encrypter is back in CryptoWall 5.1 variant and it is used in a ransomware virus which pretends to be Cryptolocker. The virus uses the .locked file extension which it ads after encrypting the files of the infected computer with…
A ransomware variant named PayForNature, dubbed after the e-mail address it uses to communicate with victims, is the reason for reports of encrypted user files with the .crypt file extension. The virus uses an RSA-1024 encryption algorithm, and this allows…
The ransomware CryptXXX was such a huge success for cyber criminals that others made a copycat version of it. The copycat is called CrypMIC, and it utilizes the same distribution method, while also using the same ransom note and payment…
Ransomware virus, named PowerLocky has been reported to infect users and use encryption to encode the files of infected computers and append the .locky file extension in them. The PowerLocky Ransomware also leaves a ransom note, extorting users to pay…
A dangerous virus created for Portuguese-speaking countries has been detected by malware research experts to use the .lok file extension and a strong cipher to encrypt files. The files which are encrypted by the Anatel virus can no longer be…
