One of the many ransomware variants of the Shade/Troldesh family is called Centurion_Legion@aol.com. This is a recently discovered version that has started to plague computer users worldwide. It uses an advanced encryption algorithm to store most user files and folders…
Another ransomware virus belonging to the CrySiS (.XTBL) ransomware variants has been reported to encrypt user files by ESG malware researchers. The ransomware virus creates a malicious executable in the %SystemDrive% folder of Windows which is then used to encrypt…
A ransomware infection, named by the mythical beast Chimera was spotted by ESG malware researchers to encrypt vital documents, pictures, videos, audio files and other of the computers it infects. The Chimera virus also deletes the backup of those files…
What Is Fantom Ransomware? Fantom ransomware is a new crypto-virus that is based on the open-source EDA2 project. The virus locks files and claims to use the RSA-4096 and AES-256 algorithms for their encryption. When the encryption is complete, the…
A ransomware virus that is a part of the XTBL/CrySiS malware group has been reported to infect users. Dubbed Malevich, the virus may use a powerful AES-128 encryption algorithm to encode the files of the infected computers asking the users…
Another virus belonging to the family of XTBL/CrySiS ransomware has emerged, infecting users massively. The malware may use a strong combination of several encryption algorithms to encode the data. It may employ different strengths of AES encryption directly on the…
Ramachandra7@india.com is the full name of this crypto-virus. The name comes from the email that is left for contacting the makers of the virus. It can safely be called an XTBL ransomware because it is part of the Troldesh/Shade family…
A_princ@aol.com is the name of this particular ransomware crypto-virus, because it uses that email address in its ransom message. Lots of viruses from the Troldesh/Shade ransomware family have been seen in the past couple of days. This virus will put…
File extensions .better_call_saul;.breaking bad;.heisenberg;.xtbl;.ytbl are just some of the expansions associated with the nasty Shade ransomware virus. There have been many variants ever since one of the first CrySiS variant has appeared, and many have the reason to believe that…
Ransomware virus belonging to the Troldesh ransomware viruses called VeraCrypt@india.com virus has been detected by ESG malware researchers to cause infections and run on system startup. Being part of the XTBL ransomware variants the Veracrypt@india.com virus is created to generate…
Open-source ransomware is a real issue which is continuously evolving. Over the past few weeks, researchers have caught three open-source crypto virus strains, based on Hidden Tear and EDA2. What all of the three strains have in common is that…
A variant of the Troldesh/Shade ransomware virus family has been spotted recently. The virus has been dubbed Drugvokrug727 because it uses the Drugvokrug727@india.com email address. The wallpaper placed on a compromised computer features a digital sketch of the main character…
Another variant of the many Troldesh ransomware variants leaving the e-mail Grand_car@aol.com has been detected in the wild. The ransomware virus is reported to use an advanced AES encryption algorith with 128-bit strength, the decryption for which is reported to…
Ransomware virus associated with the e-mail address Meldonii@india.com has been spotted out in the wild. Researchers have identified this virus to have associations with the XTBL and CrySiS ransomware variants. This automatically points out that Meldonii@india.com Ransomware may use AES…
Malware researchers have identified a string associated with the XTBL viruses, dubbing it Sitaram108@india.com ransomware virus. It uses the .xtbl file extension and similar to other XTBL viruses may use the AES and RSA ciphers to encrypt files of affected…
A ransomware threat that is a part of the many .XTBL variants has appeared, and it has begun infecting users worldwide. It uses a strong encryption algorithm to encipher the files of its victims on system startup. The aim of…
Yet another ransomware virus has appeared, belonging to the notorious .XTBL ransomware variants. The malware has been the reason for report that it aims to encrypt the files of affected users. It may use AES encryption to encode the files…
WildFire Locker is a ransomware virus that aims to encrypt the files of the computers it infects adding the .wflx file extension and asking users to pay a ransom of 299 USD to restore the encrypted files. When the virus…
Ransomware has moved from targeting hospitals to targeting universities. According to SentinelOne, six out of ten British universities have fallen victim to crypto virus attacks. The security firm has sent a FOI (Freedom of Information) request to 71 higher educational…
Part of the Purge ransomware variants the Globe virus has begun infecting PCs and encrypting their files after which appending the .purge extension to the encoded files. The aes-256 encryption algorithm may be used by the Globe malware to scramble…
