R980 is a ransomware virus, which encrypts databases, documents, photos and other files. It wants half a Bitcoin as a ransom payment, which amounts to nearly 330 US dollars. The files get encrypted with AES 256-bit and RSA4096 encryption algorithms…
We may not think of cyber crime as a “business sector” that also generates rivalry, but it doesn’t mean that cyber crime groups do not compete with each other. Having said that, it shouldn’t be too surprising that the author…
JagerDecryptor – this is what victims of the Jager ransomware see after their files have been encoded using a strong AES-256 and RSA-2048 encryption ciphers. This type of ransomware attacks has increased in both numbers and sophistication. The cyber-criminals behind…
A virus, belonging to the HiddenTear project, named Rush has continued to infect user PCs, adding the .crashed file extension after it encrypts their files. The virus is almost identical with Sanction ransomware with differences being the name, encryption and…
Ransomware, named Moth, because it uses the file extension .m0th is the sole reason of users complaining in online forums. The ransomware uses an extremely strong AES-256 encryption algorithm to encipher the files of users, rendering them unusable and unable…
NoobCrypt is a ransomware virus, which encrypts files and wants different currency as payment for ransom. The ransomware calls you a noob if you input a wrong decryption key. To remove the ransomware and see how to restore your files,…
A very interesting ransom virus, named Tilde has been detected to add the .~ (tilde sign) file extension to the files it encrypts. It uses a very strong AES encryption and demands 0.8 BTC from infected users. Tilde ransomware also…
CryptoWall’s encrypter is back in CryptoWall 5.1 variant and it is used in a ransomware virus which pretends to be Cryptolocker. The virus uses the .locked file extension which it ads after encrypting the files of the infected computer with…
A ransomware variant named PayForNature, dubbed after the e-mail address it uses to communicate with victims, is the reason for reports of encrypted user files with the .crypt file extension. The virus uses an RSA-1024 encryption algorithm, and this allows…
The ransomware CryptXXX was such a huge success for cyber criminals that others made a copycat version of it. The copycat is called CrypMIC, and it utilizes the same distribution method, while also using the same ransom note and payment…
Ransomware virus, named PowerLocky has been reported to infect users and use encryption to encode the files of infected computers and append the .locky file extension in them. The PowerLocky Ransomware also leaves a ransom note, extorting users to pay…
A dangerous virus created for Portuguese-speaking countries has been detected by malware research experts to use the .lok file extension and a strong cipher to encrypt files. The files which are encrypted by the Anatel virus can no longer be…
Ransomware variant belonging to the notorious ID kind has been detected out in the wild by security experts. The virus is associated with the e-mail bitcoinrush@aol.com since it uses it as the extension and the only mean of communicating with…
CuteRansomware is the name of a virus, which uses Google Docs to try and stay hidden from security software. It encrypts specific files. The extension this ransomware puts to all encrypted files is .encrypted in Chinese or 加密. To remove…
Ransomware virus makes have no breaks, even during summer seasons. A perfect example for that is the lately active 64-bit HolyCrypt ransomware which adds the (encrypted) name prefix at the beginning of the file names of the objects it encrypts.…
A ransomware for Windows 10 OS has appeared that not only uses a strong cipher to encrypt files of infected computers. What is new with this ransomware is that it splits files into different parts besides encrypting them, making the…
First discovered in November 2014, BandarChor has been infecting user PCs ever since, encrypting their files with a strong AES-256 cipher. The latest discoveries of this ransomware indicated that it uses an AES-256 encryption algorithm to scramble user files and…
Ransom virus which contains the e-mail address ocean-1955@india.com is believed to be a part of a large ransomware family, known as the Xtbl variants. This is an extremely dangerous ransomware, since, at this point, there is no relevant decrypter for…
Stampado is the name of ransomware, which appeared on the Dark Web earlier this week. Offered as a Ransomware-as-a-Service (RaaS) for only 39$ and a full-time license, this piece of malware is fairly accessible to cybercriminals. Heavily advertised as being…
A new version of the well-know Troldesh ransomware (also known as Encoder.858 and Shade ransomware) was just discovered by researchers at Microsoft Malware Protection Center. This latest version appears to be extensively updated. Other Versions of Troldesh: Remove Ransom:Win32/Troldesh.A (.xtbl…
