A new version of the recently appeared PadCrypt ransomware, resembling Cryptolocker includes several new features which are seen for the first time when ransomware infections are present. The ransomware is believed to use an encryption algorithm of “Suite.B” encryption standard…
Locky ransomware is the latest devastating member of the ransomware family that employs strong encryption and is used in targeted campaigns. For example, the Hollywood Presbyterian Medical Center was indeed attacked by Locky, as disclosed by security researchers. Thanks to…
If you follow IT security news, you most definitely have heard that the Hollywood Presbyterian Medical Center was hit by ransomware. Consequently, the Center decided to pay the ransom, realizing that they had no choice. However, the claim that the…
There are several ransomware pieces that append an ‘.encrypted’ extension to the victim’s filenames. Thus, such ransomware are often referred to as ‘.encrypted viruses’. One such threat is ZeroLocker that has been known to security researchers since 2014. Another ransomware…
Locky ransomware is one of the latest, most devastating additions to the ransomware malware category. Locky uses the RSA algorithm mixed with AES-128 encryption ciphers, as stated in its ransom note. The combination creates a very strong encryption. We have…
The HydraCrypt ransomware has another variant. It goes by the name of UmbreCrypt and encrypts files with extensions named after both of those variants. Hundreds of files with different extensions are encrypted by an RSA-2048 encryption algorithm. To remove the…
Created around three years ago, Ultracode ransomware is still causing infections. It seems that it locks the user files adding .ultracode file extension to them. The ransomware then leaves a ransom message pointing out the user with “instructions” on how…
New ransomware pieces constantly emerge from the depths of cybercrime. Another addition to the ransomware family of threats is JobCrypter. Currently, JobCrypter is attacking users in France via spam emails containing malicious download links and attachments. Continue reading to learn…
2017 has not marked the death of Locky ransomware. Article, designed to help you remove the Locky ransomware virus infection and try to decrypt files encrypted with the .locky file extension appended to them. Locky virus has come out in…
Here it is – the newest variant of the notorious TeslaCrypt ransomware. It has already been proven to be devastating on users with its other extensions, especially .micro. This new and shiny variant very cleverly uses the .mp3 file extension…
Meet PadCrypt, a new addition to the ransomware malware category just detected by malware researchers at abuse(.)ch and analyzed by MalwareHunterTeam. Once installed on a system, PadCrypt will encrypt certain files and append an .ETC extension. The demanded payment is…
One of the most vicious malware threats ever to affect users on a global scale – TeslaCrypt ransomware, has appeared yet again with another variant. This time, the crypto-malware uses a .mp3 file extension and possibly employs improvements in its…
A new ransomware is infecting computers around the Web. Its name is Trun, and it adds an extension with the same name to files after encrypting them. The ransomware aims to encrypt files with widely-used extensions. To remove it and…
When the Doctor ransomware appeared many users have complained, sending multiple files for decryption. This lead us to research the matter and provide users with a relevant solution to files encrypted by this nasty ransomware. The ransomware is also believed…
A new ransomware variant has begun to increasingly infect user PCs, encrypting their files with the .uzltzyc extenison. Since the ransomware’s behavior is familiar to another virus, some experts believe that it is a newer version of it. The believed…
Infections have arisen by a crypto-virus known to encrypt user files with the HydraCrypt extension and a random id. The virus is very dangerous since it may encrypt all of the user files as soon as its activated and may…
DMA Locker is a relatively new ransomware that first appeared in the beginning of January in Poland. If you have been attacked by DMA or know someone who has, we have good news for you. Malwarebytes researchers have cracked the…
The infection rates of Trojan.Ransomcrypt.X have increased once again. Because of the text displayed on the ransom message (‘Hi Buddy!’), the file-encrypting threat is also known as Buddy ransomware. Thus, in this article we will refer to the threat as…
A new type of ransomware has been detected, and it is a part of the e-mail ransomware viruses. The malware encrypts user files with a strong encryption algorithm and puts the Doctor@freelinuxmail.org e-mail address as a file extension. It also…
We have seen many unexpected things happen in the realm of malware. Creating a ransomware piece based on open-source code uploaded on GitHub for educational purposes is one of them. As a matter of fact, we are not quite sure…
