Bart ransomware has been discovered in the wild by the malware researcher Jakub Kroustek from Avast. The new string of malware encrypts files with the .perl extension. Seems identical to Locky ransomware in its note and payment instructions page. To…
The latest iteration of Locky ransomware is here. Files are encrypted with a new extension – .shit, but it is possible for other extensions to appear as well. The cryptovirus now uses HTML files (.hta) and brings back the usage…
New malware has appeared that takes advantage of the 2016 presidential elections in the US. The virus displays a fraudulent lock screen message claiming it is originating from the CIA. The message displays that the malware is a legitimate program…
Lock93 is a newly-emerged ransomware cryptovirus. The ransom note which is displayed after the file encryption process is complete can be written either in Russian or English. All encrypted files will have the extension .lock93 appended to them. The origin…
Ransomware virus known by the name Angry Duck has been reported to cause problems for users. Funnily enough, the virus uses .adk file extension and a duck for a wallpaper along with a ransom message claiming it has used the…
Since ransomware is becoming an increasingly-growing menace, we have decided to create frequently asked questions that will help you understand better ransomware viruses and better know how to protect yourself from such. Not only you will learn more information about…
Suppteam01@india.com is the name given to a cryptovirus that mimics the Cryptolocker ransomware. As it is not the first copycat and there are no other distinguishable characteristics for this virus except the email given as a contact detail, researchers named…
The Crypt888 ransomware cryptovirus is back and has a new variant called “Aviso”. The new variant targets users from Brazil, hence the ransom note is written in Portuguese. Aviso means “Warning” in Portuguese. The ransom note starts with that word…
Yet another virus from the XTBL ransomware variants has popped out into the open. Similar to other XTBL variants this virus also encrypts the files of the infected computer making them no longer openable. A ransom note is left after…
Image Source: Ransowmare.it Users on security forums and system administrators have complained about new “Parisher” ransomware that attacks primarily archives amongst other files it encrypts. The virus aims to render all files no longer usable by encrypting them after which…
Cocoslim98 is a newly emerged cryptovirus, which is called like that, because of the email that it leaves for contacting the criminals behind it. Malware researchers say that its real name is “Rotor”. The virus will encrypt files on a…
An update has been made to the latest version of Cerber Ransomware which many seem to call “4.0” using the distinctive README.hta type of files and random file extensions after it encrypts a file. The new update of the virus…
New ransomware threat has been detected, this time targeting websites. Dubbed JapanLocker by researchers, the virus aims to display a “LockeD” message asking to contact the e-mail address japanlocker@hotmail.com to unlock the website. This Ransomware is nothing new, but it…
Also known as Mircop ransomware, Crypt888 has recently been released with a newly updated version that pretends to be another notorious ransomware virus – Petya. The crypto-malware is very specific when it comes to file encryption, using the “lock” string…
Strangely enough, a ransomware virus variant that has Anubis for it’s theme has appeared, leaving encoded files in .coded file extension after it encrypts them. The virus then changes the wallpaper of the affected computer with a distinctive one showing…
What Is !XTPLOCK5.0 Cryptinfo.txt Ransomware? Cyber-criminals behind the e-mail crypt302@gmx.com have begun to demand 2 BTC from users via a ransomware virus that is dubbed “!XTPLOCK5.0” based on its ransom note string. Malware researchers, like Michael Gillepsie believe that this…
Google Go is the name of a ransomware cryptovirus. The virus is dubbed that way because it is built on Google’s program language “Go” and it is the first ever ransomware to do so. The Go language is free, open…
A Chinese version of Locky ransomware has been detected by malware researchers to drop a _HOWDO_text.html file after it encrypts files with the AES-128 and RSA-2048 ciphers and generates a unique decryption key. The Locky ransomware variants have been spreading…
New version of Philadelphia ransomware, which was part of the Stampado variants has been released, again using the same .locked file extension. The difference in this version is that it demands .3 BTC from affected victims and features a new…
“Try to kill or delete me and I will kill your PC” – this is the message the victims of the EXOTIC virus see once their computer has been infected by it. The vulgar cyber-threat goes as far as creating…
