A new ransomware from the “@” variants has been spotted and reported out in the wild. It carries the name PayCrypt and locks user files appending a random identification file extension with the paycrypt@aol e-mail address. The encrypted files are…
A new ransomware which pretends to be one of the “big fish” in this segment of malware has been reported to infect users. The ransomware imitates Locky ransomware and is named AutoLocky by malware researchers. Not only this, but it…
A new variant of an already devastating ransomware, Locky is back with different tactics of infection and advanced features. The ransomware is reported to affect users on a massive scale. The newer variant of the ransomware attacks users on a…
The malware family that produces custom made ransomware, known as Xorist has been around for quite some time now. It is being sold as a custom program that is available on the black market, and anyone who knows how to…
There is a new ransomware on the loose, called Jigsaw. The Jigsaw ransomware is themed on the movie series ‘Saw’ and encrypts files with over 120 extension types. To see the solution for restoring your files and remove the ransomware,…
Vipasana ransomware has been reported to encrypt mainline servers as well as PCs on a global scale. The name of the crypto-malware has nothing to do with the actual “Vipassana” which translates to a type of meditation. The ransom message…
There is a ransomware named CryptoHost. The ransomware collects files with different extensions and locks them in an archive with a password. To see the solution of how to restore your files and remove the ransomware, you should read the…
A ransomware called Salam! emerged recently. At first, it infected people from Lithuania, but now it has started to spread. The ransom asks a payment of one Bitcoin within the first 24 hours after encryption. Each day the ransom is…
A new worm has been detected in the wild. The cyber-threat has been reported to replicate via infected USB drives from the computers it has affected through malicious URLs. It locks the screen of the user displaying a ransom message…
Ransomware keeps gaining popularity and with it, the copycat variants also increase. One of those variants Is called Zeta. It creates several malicious files after which it encrypts the data on the compromised computer appending a custom extension ending in…
Apparently, Trump supporters are being targeted by – well – Trump ransomware. Cyber criminals behind ransomware threats aim at variety of victims – both domestic users and enterprises. For a first time, however, we have discovered a politically biased ransomware…
Ransomware keeps growing in popularity amongst cyber-criminals since it has proven its effectiveness using military grade encryption to extort users on a daily basis. One of the newest ciphering malware which has been discovered encrypts the user files with a…
Websites using the Magento platform have been hit by ransomware. Once infected, the sites are deemed unusable. The ransomware is called KimcilWare and encrypts webserver files. After encryption, it adds its index file on victim servers that can be viewed…
Ransomware – it is the new way of making money via using the malicious creations of dark web coders. One particular crypto-malware variant has the audacity to pretend even to be helpful and nice to you while using AES and…
We won’t be exaggerating if we say that every day we wake up to a new ransomware piece just detected in the wild. Unfortunately, every new ransom is worse than its predecessor – more malicious, sophisticated and damaging. To make…
Ciphering attacks by a new ransomware variant have been increasing lately. They seem to be linked to two email addresses known as unblocked@email.su and undblocked@tuta.io. The ransomware uses conventional for ransomware scripts to encode the user files with its modules…
A new devastating ransomware and it’s variants have been reported to infect users on a global scale. It’s name is Coverton, and it is reported to use several extensions that it ads after data encryption. One of the extensions is…
Update! Research indicates that current versions of PowerWare append the .locky file extension to the victim’s encrypted files, drop the same ransom notes as Locky, and even use the same graphics and phrases on their ransom payment site. The good…
A new type of Lockscreen Trojan that belongs to the Police variants has been discovered out in the wild. The malware arrives directly from foreign hosts, creates multiple files and registry objects. After this it restricts the user access to…
Update! A researcher from Heise Security, Fabian Scherschel gave an analysis report of the ransomware, in German. In there it is written that the first phase encryption used by Petya is a simple set value XOR of the Master Boot…
