CryptoWall’s encrypter is back in CryptoWall 5.1 variant and it is used in a ransomware virus which pretends to be Cryptolocker. The virus uses the .locked file extension which it ads after encrypting the files of the infected computer with…
A ransomware variant named PayForNature, dubbed after the e-mail address it uses to communicate with victims, is the reason for reports of encrypted user files with the .crypt file extension. The virus uses an RSA-1024 encryption algorithm, and this allows…
The ransomware CryptXXX was such a huge success for cyber criminals that others made a copycat version of it. The copycat is called CrypMIC, and it utilizes the same distribution method, while also using the same ransom note and payment…
Ransomware virus, named PowerLocky has been reported to infect users and use encryption to encode the files of infected computers and append the .locky file extension in them. The PowerLocky Ransomware also leaves a ransom note, extorting users to pay…
A dangerous virus created for Portuguese-speaking countries has been detected by malware research experts to use the .lok file extension and a strong cipher to encrypt files. The files which are encrypted by the Anatel virus can no longer be…
Ransomware variant belonging to the notorious ID kind has been detected out in the wild by security experts. The virus is associated with the e-mail bitcoinrush@aol.com since it uses it as the extension and the only mean of communicating with…
CuteRansomware is the name of a virus, which uses Google Docs to try and stay hidden from security software. It encrypts specific files. The extension this ransomware puts to all encrypted files is .encrypted in Chinese or 加密. To remove…
Ransomware virus makes have no breaks, even during summer seasons. A perfect example for that is the lately active 64-bit HolyCrypt ransomware which adds the (encrypted) name prefix at the beginning of the file names of the objects it encrypts.…
A ransomware for Windows 10 OS has appeared that not only uses a strong cipher to encrypt files of infected computers. What is new with this ransomware is that it splits files into different parts besides encrypting them, making the…
First discovered in November 2014, BandarChor has been infecting user PCs ever since, encrypting their files with a strong AES-256 cipher. The latest discoveries of this ransomware indicated that it uses an AES-256 encryption algorithm to scramble user files and…
Ransom virus which contains the e-mail address ocean-1955@india.com is believed to be a part of a large ransomware family, known as the Xtbl variants. This is an extremely dangerous ransomware, since, at this point, there is no relevant decrypter for…
Stampado is the name of ransomware, which appeared on the Dark Web earlier this week. Offered as a Ransomware-as-a-Service (RaaS) for only 39$ and a full-time license, this piece of malware is fairly accessible to cybercriminals. Heavily advertised as being…
A new version of the well-know Troldesh ransomware (also known as Encoder.858 and Shade ransomware) was just discovered by researchers at Microsoft Malware Protection Center. This latest version appears to be extensively updated. Other Versions of Troldesh: Remove Ransom:Win32/Troldesh.A (.xtbl…
CryptoLocker has already become one of the historical ransomware cases that put thousands of users through hell. The infamous crypto virus infected users and encrypted their files, and demanded payment in exchange for the files’ decryption. The infection was mostly…
Initially identified in July 2013, DirtyDecrypt Ransomware has been yet again revived. Researchers report that the crypto virus has spread on over 15 countries over the world with a high detection rate since its discovery. Also known as Revoyem, this…
CTB-Faker is ransomware that presents itself as CTB-Locker, but it is just a mere copycat. On top of it all, it does not encrypt files but just gathers them in a .ZIP file archive and locks them with a password.…
Since the vast popularization of ransomware campaigns seen in the past couple of years, security researchers have been trying to establish ways to prevent these crypto virus infections. In addition to the best free anti-ransomware tools, brand new (anti-ransomware) solutions…
PizzaCrypts is the name of a ransomware virus, which uses the Neutrino exploit kit as the primary distribution method. It encrypts files and wants Bitcoin currency as a ransom payment. The extension this ransomware appends to all encrypted files is…
Since its first appearance in April this year, the operators of Jigsaw crypto virus have released other variants (Epic ransomware, Payms ransomware) besides the original version appending .fun, .kkk, .btc extensions. If you have been victimized by any of Jigsaws’s…
Ransom Virus, known by the nickname CryptoFinancial has been reported to ask the sum of 0,2 BTC from affected users. The virus is regarded as a Fake Ransomare meaning that it may delete user files upon infection. To notify the…
