Ransomware, carrying the name Herbst (Autumn) has been the reason of people complaining they no longer have access to their files. What this cryptovirus also familiar as ransomware does is it uses a strong AES-256 encryption standard to encode the…
Ransomware, meant for Russian speaking users, named Lortok has been reported to encrypt the files on the devices it infects by using an AES-256 cipher. When the files are encrypted, they are modified, and the .crime file extension is added…
Computer systems have been infected with a virus that tries to imitate the CryptoWall 3.0 ransomware. The virus is also a ransomware type as it locks files and leaves a ransom message demanding 0.5 BitCoins to be paid for a…
Flimrans is a ransomlock virus belonging to the Police Ransomware variants. Such variants lock down the computer of the user preventing any access what so ever to it. The random lock virus leaves instructions on how to pay a fee…
New Update! Malware researchers from Kaspersky have updated their Rannoh Decryptor utility with decryption for the CryptXXX 3.0 ransomware family. Files should be fully decrypted with the help of that software. You can find its download page and instructions at:…
File encryption virus belonging to the id variants has been let loose to infect unsuspecting user. The malware is named JuicyLemon, and it belongs to the “id” ransomware viruses. The cyber-criminals behind JuicyLemon use a strong cipher to encode files…
In general, ransomware like CryptXXX/UltraCrypter sneaks into the victim’s computer and encrypts their files, appending an extension (.cryp1 in the case of UltraCrypter) and demanding payments in exchange for the files’ decryption. However, things can get more unfortunate, as ransomware…
Ransomware, going by the name SkidLocker has been reported to threaten users that they will never see their files again unless they make a payoff to cyber-criminal. The ransom payment amount which SkidLocker demands to decrypt the files it encodes…
Ransomware Virus, belonging to the “@” ransom variants has been reported to encode user files and add a custom file extension to them. It also leaves the email by which victims can contact the cyber-outlaws – masterlock@india.com. Once contacted the…
Our research indicates that there are at least three identical ransomware viruses currently infecting victims under different names. Ecovector and Vegclass ransomware “share” the same desktop wallpapers, and act in a very similar way. We also suspect that these two…
Cryp1, CryptXXX 3.0 or UltraCrypter ransomware – it doesn’t matter how you name it. This ransomware is currently one of the most active crypto viruses, targeting users in Germany, Spain, Italy, and other “developed” European countries. Users in the US…
Update! Malware researchers from Kaspersky have updated their Rannoh Decryptor utility with decryption for the CryptXXX 3.0 ransomware family. Files should be fully decrypted with the help of that software. You can find its download page and instructions at: Kaspersky’s…
Bleep, .1999, .0x0, .fu*k – these are the file extensions used by the nasty Bitmessage ransomware virus that encrypts the files on the computers it infects and asks 2,5 BTC to decrypt them. After encryption, the files become unable to…
Ransomware doesn’t sleep. Another crypto virus, Green_Ray ransomware, has been “introduced” to users, encrypting their files and demanding a payment for their decryption. Green_Ray has been reported to use asymmetric encryption (a public and a private key). The ransomware appends…
Latest Update! Malware researchers from Kaspersky have updated their Rannoh Decryptor utility with decryption for the CryptXXX 3.0 ransomware family. Files should be fully decrypted with the help of that software. You can find its download page and instructions at:…
The Jigsaw ransomware is back again with a fresh variant. The theme of this variant is the Invisible Empire art exhibit made by Juha Arvid Helminen. The ransomware is called Invisible Empire and named after the exhibition. This crypto-virus encrypts…
Another ransomware crypto-virus using an AOL email address has attacked unsuspecting users. The ransomware has been dubbed JohnyCryptor because that’s the name used for the email and correspondingly as the extension for encrypted files. The virus locks files and leaves…
The “hidden tear” project has brought yet another ransomware. It is named Strictor and it is also known as BankAccountSummary ransomware which wants 500$ from infected users to get the files encrypted by it back at their disposal. The ransomware…
A very dangerous RAT(Remote Access Trojan) has been reported to have capabilities to hold the computers of its victims for ransom. The Trojan has been reported to be spread primarily in North America and the UK. It has been the…
Ransomware variant was reported to affect an increasing number of users, called BuyUnlockCode has been identified to infect PCs on a global scale. The ransomware uses a strong RSA – 1024 cipher to encrypt the files and an AES cipher…
