Ransomware variant, known by the name REKTLocker has been reported to use the .rekt file extension and the RSA-2048 encryption algorithm to encipher user data. The virus then changes the wallpaper with the ransom demands, wanting the sum of 1…
Fortunately, researchers at TrendMicro have successfully created a decryptor for Cerber ransomware. Unfortunately, the cyber-criminals have anticipated this move, immediately and mockingly enough releasing a second variant of this nasty cyber-threat. The war against Cerber continues, leaving many victims of…
A researcher at Fortinet Security has discovered a new ransomware variant, called Rumble Crypt. The virus has been reported to have a payment page which is Tor-based, which points out to the possibility that it is already up and running.…
Ransomware virus, named after a symbol of evil – Hitler has be Data Recovery Tool Windows Data Recovery by Stellar Phoenix Notice! This product scans your drive sectors to recover lost files and it may not recover 100% of the…
We already know that the Internet of things is hackable and that it provides cyber criminals another way to exploit us and our devices. Where the vulnerability of IoT is headed can also be seen in the first two episodes…
AES-128 has been used by this ransomware created for Black Hat 2016 presentation. This “beautiful” piece of malware uses a C&C server that provides the decryption key of the files ShinoLocker has encrypted for free. It has been made primarily…
A ransomware virus associated with the e-mail helprecover@ghostmail.com that leaves files, named _HOW_TO_DECRYPT on the victim’s computer and adds .encrypted file extension after it encodes the files of infected users has appeared, researchers report. The virus-encoder has been reported to…
Security researchers recently came across a new ransomware piece posing as a Windows activation window – ‘Your Windows Licence has Expired’ ransomware. This ransomware, however, is slightly different than your average crypto virus. Instead of a ransom measured in Bitcoins,…
Update! According to reports of users the Cerber2 ransomware doesn’t seem to seek for temporary files (.tmp). That makes possible for the recovery of some recent .doc and .xls files by just opening their .tmp counterpart files. The talking ransomware…
The simultaneous greylisting of applications and removal of local admin rights works as the best protection against ransomware. This is the result of a study executed by CyberArk Labs, published in August 2016. The company tested more than 23 000…
Ransomware, named VenusLocker, using AES-256 and RSA-2048 ciphers to encrypt files of infected computers has appeared in the wild, leaving the encoded objects with a .Venusf extension added to them. To purchase back their files, the users are given instructions…
AES algorithm, used by a ransomware virus, called Razy had been identified by malware researchers. The ransomware uses its distinct .razy file extension which it adds to the files of your computer once it encrypts them, making them no longer…
Uyari is the name given to a new ransomware crypto-virus, which is believed to be targeting Turkish users as the ransom note is written in Turkish. That does not exclude the possibility of others being targeted and infected by the…
The Jigsaw ransomware continues to have more variants. The latest one puts the extension .xyz to encrypted files. The crypto-virus can encrypt more than 120 file extensions, as previous variants did, and will create a ransom note afterward. The theme…
R980 is a ransomware virus, which encrypts databases, documents, photos and other files. It wants half a Bitcoin as a ransom payment, which amounts to nearly 330 US dollars. The files get encrypted with AES 256-bit and RSA4096 encryption algorithms…
We may not think of cyber crime as a “business sector” that also generates rivalry, but it doesn’t mean that cyber crime groups do not compete with each other. Having said that, it shouldn’t be too surprising that the author…
JagerDecryptor – this is what victims of the Jager ransomware see after their files have been encoded using a strong AES-256 and RSA-2048 encryption ciphers. This type of ransomware attacks has increased in both numbers and sophistication. The cyber-criminals behind…
A virus, belonging to the HiddenTear project, named Rush has continued to infect user PCs, adding the .crashed file extension after it encrypts their files. The virus is almost identical with Sanction ransomware with differences being the name, encryption and…
Ransomware, named Moth, because it uses the file extension .m0th is the sole reason of users complaining in online forums. The ransomware uses an extremely strong AES-256 encryption algorithm to encipher the files of users, rendering them unusable and unable…
NoobCrypt is a ransomware virus, which encrypts files and wants different currency as payment for ransom. The ransomware calls you a noob if you input a wrong decryption key. To remove the ransomware and see how to restore your files,…
