TowerWeb is a modern ransomware variant that encrypts the files on infected computers, asking the approximate sum of 100 US dollars for decryption of the files. The virus uses a very strong cipher which denies access to the files after…
Another ransomware has started attacking users, encoding their important documents with a strong cipher. Its name is SecureCryptor, and it can be recognized by its distinctive file extension -.SecureCrypted. SecureCryptor ransomware uses a powerful encryption to cipher files of users,…
Ransomware, specifically designed to scramble e-mails of the Zimbra mail servers it attacks. It is known as Zimbra Ransomware and has been reported to be associated with several different ransomare variants which use the very same .CRYPTO file extension. Zimbra…
If your files have a .crptrgr extension added to them, the reason for that is CryptoRoger – a modern ransomware also known as a crypto-virus. What it does is it infects users via spam campaigns of malicious URLs or files.…
A rather unorthodox ransomware variation has been reported to use the notorious program WinRar to archive and lock the users’ files using a password. The virus demands users to contact Realxakepok@bigmir.net e-mail address in order to restore their files. The…
Kozy.Jozy is a Ransomware virus which uses a strong RSA encryption to encrypt the files on computers it infects. The Kozy.Jozy virus is believed to be designed for Russan speaking users because its entire ransom message which it changes as…
The Jigsaw ransomware proves to be persistent. This time around the extension .epic is given to encrypted files. The crypto-virus encrypts 120 file extensions and more, as previous variants, and creates a ransom note which is Anonymous-themed. Five thousand dollars…
A ransomware dubbed Crypt38 was found recently by Fortinet researchers. The name comes from the extension it appends to encrypted files, namely .crypt38. The ransom money it demands as payment is 1000 Rubles or roughly 15 US dollars, with the…
Reports have appeared about a new crypto virus, called NegozI ransomware. According to victims, the ransomware appends “.evil” extension to encrypted files and demands a payment in exchange for their decryption. Because of the extension it adds, some victims may…
New file encryption malware named Dr.Jimbo has been spotted to encode user data adding the .encrypted file extension to the encoded files. The ransomware uses a sophisticated encryption algorithm which changes the hex code of the files, making them inaccessible.…
XRTN is a ransomware virus reported by researchers to belong to the VaultCrypt family of ransomware viruses. It uses the same .xrtn file extension which it adds on the encrypted files after it has successfully encrypted them via the RSA-1024…
Cryptoshocker, carrying a name familiar to the notoroious Cryptolocker has recently started causing problems more and more often. The .locked file extension is added and an extremely powerful encryption cipher has been used to encode users’ files. Infected users are…
Ransomware virus reported to set the .uccu file extension on the files it has encrypted has been detected in different places around the globe. It is a mystery what “uccu” stands for, but one detail is confirmed – this specific…
A ransomware virus is known by the name DEDCryptor adding the .ded (grandpa in Russian) file extension to encrypted files. The encryptor then changes the wallpaper of users to a message notifying users their files are enciphered. The message features…
A virus-encoding program also known as ransomware, called ToxCrypt is continuing to spread its malicious data across the web. This virus aims to scare infected users into paying the ransom by resembling a toxic menace and using a strong AES…
A notorious ransomware, known by the name keyholder has started to spread again, reports on forums indicated. It carries the symbolical name KeyHolder and uses a XOR cipher to encrypt various files of encrypted users’ computers. Not only this, but…
New ransomware variant, whose name was chosen by its creators to be “Apocalypse” has emerged out into the open. The ransomware also known as a crypto-virus uses either RSA or AES cipher to encrypt the files of the computers it…
A ransomware referring to itself as RAA and RAA SEP is running in the wild. What makes it unique is that it comes along with the Pony Infostealer Trojan and is written entirely in Javascript. The ransomware encrypts files with…
Ransomware which is associated with the .7h9r file extension has been reported to affect users on a massive scale. The ransomware uses an extremely strong file encryption to encode the files of infected users. In addition to that, 7h9r leaves…
Takahiro Locker is the name of a ransomware, which has its ransom message written in Japanese. Despite that, Japanese users might not be the only ones targeted. The ransomware seeks to encrypt files with a small number of extensions, but…
