DMA Locker is a relatively new ransomware that first appeared in the beginning of January in Poland. If you have been attacked by DMA or know someone who has, we have good news for you. Malwarebytes researchers have cracked the…
The infection rates of Trojan.Ransomcrypt.X have increased once again. Because of the text displayed on the ransom message (‘Hi Buddy!’), the file-encrypting threat is also known as Buddy ransomware. Thus, in this article we will refer to the threat as…
A new type of ransomware has been detected, and it is a part of the e-mail ransomware viruses. The malware encrypts user files with a strong encryption algorithm and puts the Doctor@freelinuxmail.org e-mail address as a file extension. It also…
We have seen many unexpected things happen in the realm of malware. Creating a ransomware piece based on open-source code uploaded on GitHub for educational purposes is one of them. As a matter of fact, we are not quite sure…
There is a new ransomware on the loose. It is called 7ev3n ransomware. To remove it and see how you can decrypt your files, you should carefully read the whole article. The ransomware searches for files with widely-used extensions and…
LeChiffre is one of the latest ransomware cases that has already affected the systems of three banks and a pharmaceutical company in Mumbai, India. Even though LeChiffre is far from sophisticated, the damages it has caused amount to millions of…
New ransomware infection has been discovered by security researchers. The crypto-malware possibly originates from Russia and demands money from infected users. The ransomware is believed to spread via other malware such as a Trojan or a malicious JavaScript. Everyone who…
New crypto-malware has been detected out in the wild. It is called Rackcrypt and it is also known as MVP Locker. It claims to use a strong AES-256 encryption algorithm to encrypt infected users’ files and extort them for the…
What Is Brolo Fake BSOD Ransomware? Another locker type of ransomware called Brolo has been reported to affect users on a massive scale. The ransomware uses malicious JavaScript to infect the browser of the user and connect to a remote…
A ransomware is reported to lock the user’s web browser, demanding money in return for the fix. The ransomware pretends to be an official BSOD error caused by Windows failure. It also includes a phone number to contact the cyber-criminals.…
Reports have increased about a ransomware, called TeslaCrypt. The virus itself is reported to have a wide variety of file extensions and they keep reappearing on different infected systems. This particular variant of the ransomware uses a strong file encryption…
There is a new version of the TeslaCrypt ransomware. It is dubbed TeslaCrypt 3.0. It is known to encrypt files with the .micro extension or with .ttt and .xxx extensions. The .micro extension variant still uses an RSA encryption algorithm.…
Users have reported that the latest version of TeslaCrypt has the ability to infect users with three types of extensions – .ttt, .xxx and .micro. The ransomware Trojan has been reported by researchers to use a strong RSA encryption algorithm.…
The newest version of TeslaCrypt is here, and it is not playing about. In fact, it uses not one but three file extensions after it encrypts user files and one of them is the .ttt files. They have been reported…
Users have reported that their files have been encoded with the .xxx and .ttt file extensions. The main culprit for this is called TeslaCrypt, and it has quite a reputation amongst ransomware viruses. The third variant of TeslaCrypt claims to…
DMA Locker is malware whose main purpose is to encrypt vital files on an infected computer’s hard drive as well as its portable drives connected to it. The files that have been encrypted become corrupt and they cannot be opened.…
A new ransomware has recently appeared, going by the name of NanoLocker Ransomware. The malicious infection may encrypt the important user files on the hard drive as well as portable drives attached to the victim computer with a new extension.…
A new ransomware has been detected to infect users by encrypting their files and extort them for money for the decryption. The ransomware is reported to display a misleading pop-up notification that claims your computer is locked because the user…
There is a new variant of the Trojan.Ransomcrypt infection. It is called Trojan.Ransomcrypt.X and is classified both as Trojan and ransomware. This ransomware searches for files with specific extensions and then encrypts them. In the ransom message, the payment option…
A new version of one of the pioneers in ransomware infections, called Cryptolocker has risen from the depths of the Dark Web. The ransomware creates different modules that serve various purposes. It may also tamper with the Windows Registry Editor…
