A ransomware virus using .cryptocat as a file extension after it encodes the files of affected users with a strong RSA-2048 algorithm has been detected. The virus also leaves a ransom note in a “Your files are locked !.txt” file,…
New Ransomware virus called Mamba also known as HDDCryptor has been discovered via a malicious files, named “141.exe” and “152.exe” that uses AES encryption to fully encrypt a hard drive and not let users to even boot Windows. This new…
Thanks to ransomware researchers who like to reverse-engineer viruses, more decrypters have been released for more of the file-encryption viruses. The sole reason behind those decryptors is the poor coding of their creators. This allowed malware analysts to reverse the…
LockLock appears to be another ransomware cryptovirus that is based on the open-source EDA2 project. The virus encrypts a victim’s files and puts up a ransom note with contact details. When encryption is complete, the ransomware places the extension .locklock…
A ransomware variant belonging to the Detox ransomware viruses, called Crypt0 Ransomware has appeared recently on the malware radar, using the _crypt0 file extension after encrypting the files of users. The virus is poorly coded and drops a ransom note,…
Shortly after the Philadelphia ransomware virus came out, a decryptor for it has been released by malware researchers. When it was spotted, the ransomware has been released for 400$ on the black market. The page advertising the virus outlined it…
A nasty virus, called CryPy, reported to use the Python language for it’s script has been detected by malware researchers, using AES-256 cipher to encode files. The encryptes files by this virus have the .cry file extension and in addition…
A new variant of the Stampado ransomware – the Philadephia virus has been released to the public using the .locked file extension. The virus has been sold in the deep web markets as an inexpensive virus that can encrypt the…
Ransomware is quickly becoming a major threat in the cyber space since it’s easy to use, hard to track and decrypt and the ROI is high. As a result, it’s evolving and improving with horrific speed. Cry ransomware, for example,…
Cyber crooks have brought Bart ransomware virus back in the game – this time it’s called Bart v2.0 (also Bart2) and appends encrypted files with the .bart2 extension. Bart v2.0 is considered an improved version from its predecessor Bart, for…
A ransomware virus that attacks the files of it’s victims only to archive them in password protected .ZIP files has been reported to wreak havoc on user computers. The virus moves all of the archived files in a RarVault folder…
Ransomware, created mainly for Russian speaking users, named KawaiiLocker has been reported to increasingly infect more and more users. The virus locks the files of the infected computer by encrypting them and asks the victim to pay approximately 6000 rubles…
A ransomware virus going by the name N1N1N1 has been reported to use a very stron encryption algorithm to encode the files of unsuspecting users. The virus leaves behind the .n1n1n1 file extension to every file it has encrypted along…
Ransomware virus, resembling very much TeslaCrypt and Locky ransomware, named Ransomcuck has been reported to lock affected users’ files using the AES and RSA encryption algorithms. The virus uses the .ransomcuck and .cuck file extensions after it enciphers the files…
A ransomware virus, carrying the name Flyper, based on the HiddenTear virus project has been caught out in the wild to infect user PCs. The virus uses a very strong RSA-2048 file encryption mechanism to encipher the files of unsuspecting…
A virus pretending to be the CSTO, called Cry ransomware had been reported to use RSA-4096 and the .cry file extension to encrypt the files of computers infected by it. The virus wants it’s victims to pay the different sum,…
A ransomware virus, belonging to the dangerous CryiSiS / XTBL family of viruses has been reported to leave behind the e-mail Melme@india.com for contact after encrypting files of it’s victims. The virus may encode important files such as videos, audio…
A ransomware virus belonging to the @india.com ransomware variants has been reported to encrypt user files using a strong encryption algorithm. After encryption, the Masterlock virus leaves a .crypt file extension along with a unique identification number. All users infected…
A ransomware virus dubbed NullByte was reported by malware researchers to append the _nullbyte file extension to the files which it encrypts with a strong AES cipher. The name nullbyte originates from the NUL character in ASCII control code, suggesting…
A crypto-virus, known by the e-mail Cyber_Baba2@aol.com and also known as CPYPAURA variant at TrendMicro’s threat encyclopedia, has been reported to have a high level of infections. The virus encrypts the files of users who have been infected by it,…
