Goliath and The Hall Of Ransom Malware researchers have identified a malware writing group, named Hall of Ransom in the deep web which was reported to sell Goliath and Locky ransomware to beginner users. This strategy is also known as…
A new variant of old ransomware, EnCiPhErEd is a part of the Xorist crypto family. The virus encrypts files on compromised systems leaving its name as a file extension to the encoded files. The ransomware has also been reported by…
A virus-encoder has been detected by malware researchers to pretend to be CryptoLocker Ransomware and encrypt the user files with .Z81928819 alpha numerical file extension. The ransomware is named Ghost Crypt by malware researchers who also report that it creates…
An interesting ransomware variant which is reported to have the .8lock8 extension after it encodes the files of the user asking for ransom money is detected out into the open. It copies the behavior of another ransomware known as HiddenTear…
It appears that Ninja ransomware may be back and this time it uses ninja.gaiver@aol.com, kaligula.caesar@aol.com and seven_legion@india.com cyber-criminal addresses. The ransomware does not even use a ransom note, instead leaving the Ninja.Gaiver e-mail address on the files it encrypts. The…
A ransomware crypto-virus called Crypren popped up a couple of days ago. The virus will lock files and append an extension .encrypted to all of them. The ransom money that Crypren demands is around 45 US dollars. To see how…
Ransomware, called GNL Locker(German-Netherlands Locker) which uses the never seen before AES-512 encryption algorithm has been spotted out in the wild. The dangerous malware encrypts the user files adding a .locked file extension to them. After this, it has been…
Petya ransomware now spreads with a copy of itself – Mischa. Petya, as before, asks for admin privileges to encrypt the MBR, but now if that fails, Mischa ransomware is loaded, which encrypts files on the infected PC. Considering how…
The CryptoHitman ransomware has a new variant. Now it bears the name CryptoHitman, but its core is more or less the same. Instead of showing the puppet used in the “Saw” movies, the ransomware’s theme now is the Hitman character…
What Is GPCODE Ransomware? Users report activity by ransomware known as GPCODE. This particular virus uses a combination of a very strong encryption ciphers – RSA and AES, both used by the government to hide top secret files. Not only…
A week or so ago, researchers from Proofpoint uncovered their findings of a ransomware they named MM Locker. The ransomware encrypts files with the .locked extension. Rumor has it that some of the infections are caused by crack executables for…
The CryptXXX malware writers have designed a new version which has been reported to contain several drastic improvements in encrypting the files of unsuspecting victims. The ransomware encrypts users’ files after which locks the screen with the ransom message. This…
Attacks by a ransomware discovered in April that is reportedly associated with Russia, carrying the name Enigma, have been reported to be rapidly rising. This nasty cyber threat encrypts the files of users using a strong AES encryption algorithm after…
Shujin ransomware, written entirely in Chinese has been reported on security forum to infect unsuspecting users. The ransom note is written entirely in Chinese, and the encoded files are in the .txt file extension. This particular ransomware, like many others,…
Security researchers at Palo Alto Networks disclosed that an old ransomware family – Bucbi ransomware – has been just revived after 2 years of silence. The Bucbi threat was discovered in 2014, and it hasn’t been registered active since then.…
Ransomware cases usually follow the same pattern of infection and behavior. However, a recently detected ransomware proves that ransomware authors can be creative, too. The so-called CryptMix ransomware is operated by a group of individuals calling themselves the Charity Team.…
Recently, a ransomware that goes by the name of TrueCrypter surfaced. It can disable several Windows processes to increase its longevity. The ransomware encrypts files with the .enc extension. Around $100 is the sum of money asked as payment for…
Ransomware that uses different encryption techniques, named Mobef has been reported to ask ransom money to give infected users access to the files it encrypts on their computers. Unlike other ransomware infections, Mobef may employ the DES encryption algorithm, suggesting…
7ev3n ransomware has been updated with a brand-new variant. Now it bears the name 7ev3n-HONE$T and asks less money for payment. To remove this virus and see how you can try to decrypt your files, you should read the article…
Unlike other ransomware variants, this particular crypto-malware has an entirely different approach when it begins to extort users. Named Alpha ransomware by researchers, it drops a ransom note in every encrypted folder and demands 400 US dollars to be directly…
