A ransomware dubbed Crypt38 was found recently by Fortinet researchers. The name comes from the extension it appends to encrypted files, namely .crypt38. The ransom money it demands as payment is 1000 Rubles or roughly 15 US dollars, with the…
Reports have appeared about a new crypto virus, called NegozI ransomware. According to victims, the ransomware appends “.evil” extension to encrypted files and demands a payment in exchange for their decryption. Because of the extension it adds, some victims may…
New file encryption malware named Dr.Jimbo has been spotted to encode user data adding the .encrypted file extension to the encoded files. The ransomware uses a sophisticated encryption algorithm which changes the hex code of the files, making them inaccessible.…
XRTN is a ransomware virus reported by researchers to belong to the VaultCrypt family of ransomware viruses. It uses the same .xrtn file extension which it adds on the encrypted files after it has successfully encrypted them via the RSA-1024…
Cryptoshocker, carrying a name familiar to the notoroious Cryptolocker has recently started causing problems more and more often. The .locked file extension is added and an extremely powerful encryption cipher has been used to encode users’ files. Infected users are…
Ransomware virus reported to set the .uccu file extension on the files it has encrypted has been detected in different places around the globe. It is a mystery what “uccu” stands for, but one detail is confirmed – this specific…
A ransomware virus is known by the name DEDCryptor adding the .ded (grandpa in Russian) file extension to encrypted files. The encryptor then changes the wallpaper of users to a message notifying users their files are enciphered. The message features…
A virus-encoding program also known as ransomware, called ToxCrypt is continuing to spread its malicious data across the web. This virus aims to scare infected users into paying the ransom by resembling a toxic menace and using a strong AES…
A notorious ransomware, known by the name keyholder has started to spread again, reports on forums indicated. It carries the symbolical name KeyHolder and uses a XOR cipher to encrypt various files of encrypted users’ computers. Not only this, but…
New ransomware variant, whose name was chosen by its creators to be “Apocalypse” has emerged out into the open. The ransomware also known as a crypto-virus uses either RSA or AES cipher to encrypt the files of the computers it…
A ransomware referring to itself as RAA and RAA SEP is running in the wild. What makes it unique is that it comes along with the Pony Infostealer Trojan and is written entirely in Javascript. The ransomware encrypts files with…
Ransomware which is associated with the .7h9r file extension has been reported to affect users on a massive scale. The ransomware uses an extremely strong file encryption to encode the files of infected users. In addition to that, 7h9r leaves…
Takahiro Locker is the name of a ransomware, which has its ransom message written in Japanese. Despite that, Japanese users might not be the only ones targeted. The ransomware seeks to encrypt files with a small number of extensions, but…
The family of Crysis ransomware viruses is able to encode files on different drives as well as external devices. The virus uses an extremely powerful combination of three ciphers to encrypt data – AES, RSA key to lock the AES…
Ransomware virus from the “@” family has been reported yet again on security forums to encrypt files of unsuspecting users. The ransomware is believed to be widespread via e-mails that contain malicious attachments and it uses a powerful cipher to…
Ransomware, known as CryFile has been reported to infect computers primarily in Russia. This nasty crypto-virus is reported to encrypt files of the infected users, denying them access to them. The newly encrypted files have the .criptiko, .criptoko, .criptokod, .cripttt,…
The Jigsaw ransomware makes its appearance yet again. This time, it is called Payms. The crypto-virus encrypts more than 120 file extensions like previous variants, adding a .payms extension or a variation of it. Unfortunately, the Jigsaw ransomware is sold…
The notorious Troldesh family of ransomware viruses has just increased with a new variant. The new crypto-ransomware variant encrypts the user files adding a .Better_call_saul file extension after them. It is reported by researchers at Nyxbone to utilize a powerful…
Ransomware, carrying the name Herbst (Autumn) has been the reason of people complaining they no longer have access to their files. What this cryptovirus also familiar as ransomware does is it uses a strong AES-256 encryption standard to encode the…
Ransomware, meant for Russian speaking users, named Lortok has been reported to encrypt the files on the devices it infects by using an AES-256 cipher. When the files are encrypted, they are modified, and the .crime file extension is added…
