Users have reported that their files have been encoded with the .xxx and .ttt file extensions. The main culprit for this is called TeslaCrypt, and it has quite a reputation amongst ransomware viruses. The third variant of TeslaCrypt claims to…
DMA Locker is malware whose main purpose is to encrypt vital files on an infected computer’s hard drive as well as its portable drives connected to it. The files that have been encrypted become corrupt and they cannot be opened.…
A new ransomware has recently appeared, going by the name of NanoLocker Ransomware. The malicious infection may encrypt the important user files on the hard drive as well as portable drives attached to the victim computer with a new extension.…
A new ransomware has been detected to infect users by encrypting their files and extort them for money for the decryption. The ransomware is reported to display a misleading pop-up notification that claims your computer is locked because the user…
There is a new variant of the Trojan.Ransomcrypt infection. It is called Trojan.Ransomcrypt.X and is classified both as Trojan and ransomware. This ransomware searches for files with specific extensions and then encrypts them. In the ransom message, the payment option…
A new version of one of the pioneers in ransomware infections, called Cryptolocker has risen from the depths of the Dark Web. The ransomware creates different modules that serve various purposes. It may also tamper with the Windows Registry Editor…
Ransomware is currently affecting thousands of users on a global scale. Victims are typically asked to pay a certain amount of money in order to have their files restored via a unique decryption key. Ransomware scenarios may vary from case…
The first ransomware written entirely in JavaScript has been created. It is called Ransom32 as seen in its ransom note. Ransom32 encrypts files with a strong military grade encryption. The ransom note states that you only have one week to…
A new ransomware has been detected to infect user PCs, encrypting sensitive files, called CryptoJoker. However, contradictory to its name the cyber-threat is not funny business at all. The ransomware variant has been outlined to infect files with multiple file…
A new ransomware has been reported over security forums to encrypt massively user file s with the .73i87a extension using infected setup programs. One user reported that the downloaded setup file was different than what he believed to have downloaded…
Unfortunately, ransomware has become one of the most prevalent and damaging cyber threats. New variants of popular ransomware pieces emerge all the time, as well as brand new cases. Gomasom ransomware has been just detected in the wild. Gomasom has…
Ransomware campaigns have been active all year round. However, with the Christmas holidays almost here, malicious actors seem to be more active and determined. Security experts from FortiNet and Heimdal have reported that two of the most famous ransomware families…
A new ransomware type of trojan horse has been reported to affect an increasing number of online users, encrypting their files with the .rdm extension. Affected users report that renaming the files back to their original extension and removing the…
A new ransomware that has been reported to encrypt user data with the .him0m browser extension has been spotted to affect an increasing amount of users. The ransom note is in English and is very threatening and direct, giving users…
Yet another ransomware is infecting thousands of computers and encrypting users’ files. Researchers have dubbed it brcodesinfo@gmail(.)com because this email is used in the names of the encrypted files. The files get locked via the 256-bit AES algorithm and require…
Ransomware is restless, and so are the malicious actors behind it who are currently infecting millions of users. At the end of 2015, we are seeing new versions of encrypting families that have been active in the past. XRTN ransomware…
TeslaCrypt, also known as AlphaCrypt, Cryptesla, and Tescrypt is one of the most prevalent crypto viruses (or ransomware) at the moment, the other one being CryptoWall. Recently, we witnessed a freshly updated version of TeslaCrypt. This version was encrypting the…
Another variant of the Shade Trojan ransomware has appeared lately and bears the name Files1147@gmail(.)com. That is the email provided by cybercriminals, for where the ransom money to be sent. The ransomware encrypts files with a .breaking_bad file extension. In…
A new ransomware, or more likely, a new version of a well-known ransomware, is currently using an encryption algorithm even stronger than RSA-2048. The ransomware piece claims to have employed RSA-4096. Unfortunately, one of our own users has contacted us…
Recently, it has been reported that a Trojan that is also ransomware called Cryptesla 2.2.0 downloads itself through an Adobe Flash vulnerability. It is better known as TeslaCrypt and encrypts files in a .vvv file format. In its latest installment…
