A notorious ransomware, known by the name keyholder has started to spread again, reports on forums indicated. It carries the symbolical name KeyHolder and uses a XOR cipher to encrypt various files of encrypted users’ computers. Not only this, but…
New ransomware variant, whose name was chosen by its creators to be “Apocalypse” has emerged out into the open. The ransomware also known as a crypto-virus uses either RSA or AES cipher to encrypt the files of the computers it…
A ransomware referring to itself as RAA and RAA SEP is running in the wild. What makes it unique is that it comes along with the Pony Infostealer Trojan and is written entirely in Javascript. The ransomware encrypts files with…
Ransomware which is associated with the .7h9r file extension has been reported to affect users on a massive scale. The ransomware uses an extremely strong file encryption to encode the files of infected users. In addition to that, 7h9r leaves…
Takahiro Locker is the name of a ransomware, which has its ransom message written in Japanese. Despite that, Japanese users might not be the only ones targeted. The ransomware seeks to encrypt files with a small number of extensions, but…
The family of Crysis ransomware viruses is able to encode files on different drives as well as external devices. The virus uses an extremely powerful combination of three ciphers to encrypt data – AES, RSA key to lock the AES…
Ransomware virus from the “@” family has been reported yet again on security forums to encrypt files of unsuspecting users. The ransomware is believed to be widespread via e-mails that contain malicious attachments and it uses a powerful cipher to…
Ransomware, known as CryFile has been reported to infect computers primarily in Russia. This nasty crypto-virus is reported to encrypt files of the infected users, denying them access to them. The newly encrypted files have the .criptiko, .criptoko, .criptokod, .cripttt,…
The Jigsaw ransomware makes its appearance yet again. This time, it is called Payms. The crypto-virus encrypts more than 120 file extensions like previous variants, adding a .payms extension or a variation of it. Unfortunately, the Jigsaw ransomware is sold…
The notorious Troldesh family of ransomware viruses has just increased with a new variant. The new crypto-ransomware variant encrypts the user files adding a .Better_call_saul file extension after them. It is reported by researchers at Nyxbone to utilize a powerful…
Ransomware, carrying the name Herbst (Autumn) has been the reason of people complaining they no longer have access to their files. What this cryptovirus also familiar as ransomware does is it uses a strong AES-256 encryption standard to encode the…
Ransomware, meant for Russian speaking users, named Lortok has been reported to encrypt the files on the devices it infects by using an AES-256 cipher. When the files are encrypted, they are modified, and the .crime file extension is added…
Computer systems have been infected with a virus that tries to imitate the CryptoWall 3.0 ransomware. The virus is also a ransomware type as it locks files and leaves a ransom message demanding 0.5 BitCoins to be paid for a…
Flimrans is a ransomlock virus belonging to the Police Ransomware variants. Such variants lock down the computer of the user preventing any access what so ever to it. The random lock virus leaves instructions on how to pay a fee…
New Update! Malware researchers from Kaspersky have updated their Rannoh Decryptor utility with decryption for the CryptXXX 3.0 ransomware family. Files should be fully decrypted with the help of that software. You can find its download page and instructions at:…
File encryption virus belonging to the id variants has been let loose to infect unsuspecting user. The malware is named JuicyLemon, and it belongs to the “id” ransomware viruses. The cyber-criminals behind JuicyLemon use a strong cipher to encode files…
In general, ransomware like CryptXXX/UltraCrypter sneaks into the victim’s computer and encrypts their files, appending an extension (.cryp1 in the case of UltraCrypter) and demanding payments in exchange for the files’ decryption. However, things can get more unfortunate, as ransomware…
Ransomware, going by the name SkidLocker has been reported to threaten users that they will never see their files again unless they make a payoff to cyber-criminal. The ransom payment amount which SkidLocker demands to decrypt the files it encodes…
Ransomware Virus, belonging to the “@” ransom variants has been reported to encode user files and add a custom file extension to them. It also leaves the email by which victims can contact the cyber-outlaws – masterlock@india.com. Once contacted the…
Our research indicates that there are at least three identical ransomware viruses currently infecting victims under different names. Ecovector and Vegclass ransomware “share” the same desktop wallpapers, and act in a very similar way. We also suspect that these two…
