In general, ransomware like CryptXXX/UltraCrypter sneaks into the victim’s computer and encrypts their files, appending an extension (.cryp1 in the case of UltraCrypter) and demanding payments in exchange for the files’ decryption. However, things can get more unfortunate, as ransomware…
Ransomware, going by the name SkidLocker has been reported to threaten users that they will never see their files again unless they make a payoff to cyber-criminal. The ransom payment amount which SkidLocker demands to decrypt the files it encodes…
Ransomware Virus, belonging to the “@” ransom variants has been reported to encode user files and add a custom file extension to them. It also leaves the email by which victims can contact the cyber-outlaws – masterlock@india.com. Once contacted the…
Our research indicates that there are at least three identical ransomware viruses currently infecting victims under different names. Ecovector and Vegclass ransomware “share” the same desktop wallpapers, and act in a very similar way. We also suspect that these two…
Cryp1, CryptXXX 3.0 or UltraCrypter ransomware – it doesn’t matter how you name it. This ransomware is currently one of the most active crypto viruses, targeting users in Germany, Spain, Italy, and other “developed” European countries. Users in the US…
Update! Malware researchers from Kaspersky have updated their Rannoh Decryptor utility with decryption for the CryptXXX 3.0 ransomware family. Files should be fully decrypted with the help of that software. You can find its download page and instructions at: Kaspersky’s…
Bleep, .1999, .0x0, .fu*k – these are the file extensions used by the nasty Bitmessage ransomware virus that encrypts the files on the computers it infects and asks 2,5 BTC to decrypt them. After encryption, the files become unable to…
Ransomware doesn’t sleep. Another crypto virus, Green_Ray ransomware, has been “introduced” to users, encrypting their files and demanding a payment for their decryption. Green_Ray has been reported to use asymmetric encryption (a public and a private key). The ransomware appends…
Latest Update! Malware researchers from Kaspersky have updated their Rannoh Decryptor utility with decryption for the CryptXXX 3.0 ransomware family. Files should be fully decrypted with the help of that software. You can find its download page and instructions at:…
The Jigsaw ransomware is back again with a fresh variant. The theme of this variant is the Invisible Empire art exhibit made by Juha Arvid Helminen. The ransomware is called Invisible Empire and named after the exhibition. This crypto-virus encrypts…
Another ransomware crypto-virus using an AOL email address has attacked unsuspecting users. The ransomware has been dubbed JohnyCryptor because that’s the name used for the email and correspondingly as the extension for encrypted files. The virus locks files and leaves…
The “hidden tear” project has brought yet another ransomware. It is named Strictor and it is also known as BankAccountSummary ransomware which wants 500$ from infected users to get the files encrypted by it back at their disposal. The ransomware…
A very dangerous RAT(Remote Access Trojan) has been reported to have capabilities to hold the computers of its victims for ransom. The Trojan has been reported to be spread primarily in North America and the UK. It has been the…
Ransomware variant was reported to affect an increasing number of users, called BuyUnlockCode has been identified to infect PCs on a global scale. The ransomware uses a strong RSA – 1024 cipher to encrypt the files and an AES cipher…
A crypto-virus known as ECLR ransomware has reported using a strong encryption cipher to encode the files of infected computers, demanding the insane sum of 100 BitCoins for their decryption. In USD this sum equals to around 44700$ and infected…
Ransom malware, known by the name zCrypt has been reported to target primarily Russian-speaking countries, researchers claim. The ransomware may use a strong RSA-2048 cipher to encrypt the files on the computers it infects. After this, it leaves a ransom…
New Update! Malware researchers from Kaspersky have updated their Rannoh Decryptor utility with decryption for the CryptXXX 3.0 ransomware family. Files should be fully decrypted with the help of that software. You can find its download page and instructions at:…
PClock ransomware, pretending to be the notorious Cryptolocker, which is one of the first infections of this kind, has been reported to encrypt files. The crypto-virus uses the algorithm XOR to encrypt the data. The PClock ransomware wants 0.5 BTC,…
A ransomware crypto-virus that goes by the name of Mahasaraswati is spreading around the Web. The email left for victims with instructions to pay the ransom is located in India, although the origin of the ransomware and its creator is…
The latest by the notorious malware variants DMA Locker is now here, and it means business. Dubbed “!DMALOCK4.0” In its hex prefix, the 4th version of the ransomware uses two ciphers to encrypt the files of infected users – AES…
