A ransomware virus that is a part of the XTBL/CrySiS malware group has been reported to infect users. Dubbed Malevich, the virus may use a powerful AES-128 encryption algorithm to encode the files of the infected computers asking the users…
Another virus belonging to the family of XTBL/CrySiS ransomware has emerged, infecting users massively. The malware may use a strong combination of several encryption algorithms to encode the data. It may employ different strengths of AES encryption directly on the…
Ramachandra7@india.com is the full name of this crypto-virus. The name comes from the email that is left for contacting the makers of the virus. It can safely be called an XTBL ransomware because it is part of the Troldesh/Shade family…
A_princ@aol.com is the name of this particular ransomware crypto-virus, because it uses that email address in its ransom message. Lots of viruses from the Troldesh/Shade ransomware family have been seen in the past couple of days. This virus will put…
File extensions .better_call_saul;.breaking bad;.heisenberg;.xtbl;.ytbl are just some of the expansions associated with the nasty Shade ransomware virus. There have been many variants ever since one of the first CrySiS variant has appeared, and many have the reason to believe that…
Ransomware virus belonging to the Troldesh ransomware viruses called VeraCrypt@india.com virus has been detected by ESG malware researchers to cause infections and run on system startup. Being part of the XTBL ransomware variants the Veracrypt@india.com virus is created to generate…
Open-source ransomware is a real issue which is continuously evolving. Over the past few weeks, researchers have caught three open-source crypto virus strains, based on Hidden Tear and EDA2. What all of the three strains have in common is that…
A variant of the Troldesh/Shade ransomware virus family has been spotted recently. The virus has been dubbed Drugvokrug727 because it uses the Drugvokrug727@india.com email address. The wallpaper placed on a compromised computer features a digital sketch of the main character…
Another variant of the many Troldesh ransomware variants leaving the e-mail Grand_car@aol.com has been detected in the wild. The ransomware virus is reported to use an advanced AES encryption algorith with 128-bit strength, the decryption for which is reported to…
Ransomware virus associated with the e-mail address Meldonii@india.com has been spotted out in the wild. Researchers have identified this virus to have associations with the XTBL and CrySiS ransomware variants. This automatically points out that Meldonii@india.com Ransomware may use AES…
Malware researchers have identified a string associated with the XTBL viruses, dubbing it Sitaram108@india.com ransomware virus. It uses the .xtbl file extension and similar to other XTBL viruses may use the AES and RSA ciphers to encrypt files of affected…
A ransomware threat that is a part of the many .XTBL variants has appeared, and it has begun infecting users worldwide. It uses a strong encryption algorithm to encipher the files of its victims on system startup. The aim of…
Yet another ransomware virus has appeared, belonging to the notorious .XTBL ransomware variants. The malware has been the reason for report that it aims to encrypt the files of affected users. It may use AES encryption to encode the files…
WildFire Locker is a ransomware virus that aims to encrypt the files of the computers it infects adding the .wflx file extension and asking users to pay a ransom of 299 USD to restore the encrypted files. When the virus…
Ransomware has moved from targeting hospitals to targeting universities. According to SentinelOne, six out of ten British universities have fallen victim to crypto virus attacks. The security firm has sent a FOI (Freedom of Information) request to 71 higher educational…
Part of the Purge ransomware variants the Globe virus has begun infecting PCs and encrypting their files after which appending the .purge extension to the encoded files. The aes-256 encryption algorithm may be used by the Globe malware to scramble…
A ransomware virus reported to belong to the CrySiS and .xtbl ransomware variants has been reported to encrypt user files on Windows computers with a strong military grade ciphers. The XTBL variants are usually reported to use AES, RSA, and…
Alma Locker virus is a recent ransomware discovered by a malware researcher from Proofpoint security. The researcher has found that the virus spreads via the RIG Exploit Kit. The ransomware encrypts nearly 90 file types. Victims have five days to…
Crypto-viruses are an increasing menace that aims to turn your day the other way around, making you pay to cyber-criminals for keys that were encrypted. And what is worse is that cyber-crooks constantly keep developing new and more sophisticated ways…
A ransomware virus has been spotted to attack primarily Czech speaking users, according to malware researchers. It is dubbed Czech ransomware and uses the ??? file extension which it appends to the files encrypted by it. The affected files by…
