In the past couple of years, ransomware attacks have reached skyrocket levels. To many people, especially security researchers, common tax payers/ victims and corporations, ransomware has turned into a nightmare. Among all of the file-encrypting pieces, there are particularly two…
Trojan.Cryptolocker also named Trojan.Gpcoder.H, CryptLocker.B, Trojan:Win32/Crilock.A, TROJ_CRILOCK.NS, Trojan.Ransomcrypt.F is an extremely devastating trojan horse that is reported to encrypt user files to extort them for money in return for a decryption key. This vicious threat may infect user PCs in…
This type of trojan horse is connected closely with Police Association Ransomware, FBI Moneypak ransomware and ‘Votre ordinateur est bloque en raison du delit de la loi de la France ‘ ransomware infections. It is a mix of different Trojans…
Reports have increased recently, regarding a new ransomware virus, called BitCrypt. I may use unique RSA-100 type of encryption that is next to impossible to decrypt. Like other ransomware viruses, such as CryptoWall, Troldesh, CryptPKO and others, BitCrypt scans for…
A Trojan Ransomware called DirtyDecrypt, also known asTrojan.Ransomcrypt.D, Revoyem and dirtydecrypt.exe has been around since July 2013. According to new data, the ransomware has been recently revived. Due to its malicious character, many users refer to the threat as DirtyDecrypt…
A very vile ransomware virus that has similarities to the most widely distributed CryptoWall threat has appeared on the IT security radar. The threat is known to encrypt user files, dropping a message with instructions on how to pay a…
A new type of ransomware believed to be one of the Troldesh variants has appeared amongst others. It employs the .crypt extensions in a file. It is thought to create files, called cconf.txt and cconf.enc. The encrypted files use a…
Name Type Ransomware Short Description After infection encrypts files important for the user, demanding ransom in bitcoin currency or any other currency paid online. May not restore files after. Symptoms The .txt and .html files on the user Desktop with…
Name Type Spam Email, CTB Locker ransomware Short Description After infection encrypts files important for the user, demanding ransom in bitcoin currency or any other currency paid online. May not restore files after. Symptoms Screen message, Corrupted error message when…
RaaS, or Ransomware as a Service, is a new ransomware that has recently been released in the wild. It is dubbed RaaS for a reason since it allows affiliate parties to generate income by spreading the file encrypting threat. Not…
CryptPKO is regarded as a Ransomware Trojan that encrypts important files and deploys HOW TO DECRYPT.txt file on the victim PC’s desktop. This dangerous threat may be distributed via many methods, main of which are via email, downloads from redirects…
Troldesh ransomware has already been detected and identified by Russian researchers as a file-encrypting threat. As STF researchers enclosed earlier this year, Troldesh attacks the system and encrypts the user’s files, adding an .xtbl extension to them and even renaming…
Reports of a new ransomware have increased, going by the name of decipher@keemail.me since this is the sole piece of info that is published by the attacker(s). Users claim that this type of malware encrypted their files with a particular…
There have been several reports, regarding ‘HELP_DECRYPT’ named files on the users’ desktops that are .png , .url, .txt and there is also an HTML page being reported. These files may be an indicator that there is a CryptoWall 3.0…
A new winlocker has appeared that may block access to a machine and then force the user to complete various tasks to grant his access back to the computer. It is ransomware, that was made to be smarter in some…
Ransomware by the name of Rector (also known as Trojan/Win32.Rector.A, Trojan-Ransom.Win32.Rector or Trojan:Win32/Orsam!rts) has been infecting computers worldwide. The most common way it may be deployed is by email attachment in the form of a document or any other files…
A Trojan-Ransom program has been detected in the wild. As a matter of fact, the threat was first discovered in 2011, but has been recently revived. It is dubbed Trojan/Win32.Rector.a[Ransom] and allows attackers to steal important information from the attacked…
Vicious ransomware now uses fraud click as means of distribution. Another Day, Another Exploit After the Zero-day Flash exploit, the ransomware infection CryptoWall keeps finding new methods of spreading to systems. Now if your device has been hijacked by the…
An “ABOUT FILES!” (*.txt) ransom message has been detected in the wild. If the file is located in all directories on a system and an error_ is added to files with various extensions, then the PC have been attacked by…
The RSA-2048 encryption key typical for Cryptowall 3.0 has been reported to strike users’ computers and display a ransomware message. Thus, the threat is also dubbed Ransomware RSA-2048 or may be referred as RSA-2048 virus. Once activated, the encryption key…
