Locky ransomware is one of the latest, most devastating additions to the ransomware malware category. Locky uses the RSA algorithm mixed with AES-128 encryption ciphers, as stated in its ransom note. The combination creates a very strong encryption. We have…
The HydraCrypt ransomware has another variant. It goes by the name of UmbreCrypt and encrypts files with extensions named after both of those variants. Hundreds of files with different extensions are encrypted by an RSA-2048 encryption algorithm. To remove the…
Created around three years ago, Ultracode ransomware is still causing infections. It seems that it locks the user files adding .ultracode file extension to them. The ransomware then leaves a ransom message pointing out the user with “instructions” on how…
New ransomware pieces constantly emerge from the depths of cybercrime. Another addition to the ransomware family of threats is JobCrypter. Currently, JobCrypter is attacking users in France via spam emails containing malicious download links and attachments. Continue reading to learn…
2017 has not marked the death of Locky ransomware. Article, designed to help you remove the Locky ransomware virus infection and try to decrypt files encrypted with the .locky file extension appended to them. Locky virus has come out in…
Here it is – the newest variant of the notorious TeslaCrypt ransomware. It has already been proven to be devastating on users with its other extensions, especially .micro. This new and shiny variant very cleverly uses the .mp3 file extension…
Meet PadCrypt, a new addition to the ransomware malware category just detected by malware researchers at abuse(.)ch and analyzed by MalwareHunterTeam. Once installed on a system, PadCrypt will encrypt certain files and append an .ETC extension. The demanded payment is…
One of the most vicious malware threats ever to affect users on a global scale – TeslaCrypt ransomware, has appeared yet again with another variant. This time, the crypto-malware uses a .mp3 file extension and possibly employs improvements in its…
A new ransomware is infecting computers around the Web. Its name is Trun, and it adds an extension with the same name to files after encrypting them. The ransomware aims to encrypt files with widely-used extensions. To remove it and…
When the Doctor ransomware appeared many users have complained, sending multiple files for decryption. This lead us to research the matter and provide users with a relevant solution to files encrypted by this nasty ransomware. The ransomware is also believed…
A new ransomware variant has begun to increasingly infect user PCs, encrypting their files with the .uzltzyc extenison. Since the ransomware’s behavior is familiar to another virus, some experts believe that it is a newer version of it. The believed…
Infections have arisen by a crypto-virus known to encrypt user files with the HydraCrypt extension and a random id. The virus is very dangerous since it may encrypt all of the user files as soon as its activated and may…
DMA Locker is a relatively new ransomware that first appeared in the beginning of January in Poland. If you have been attacked by DMA or know someone who has, we have good news for you. Malwarebytes researchers have cracked the…
The infection rates of Trojan.Ransomcrypt.X have increased once again. Because of the text displayed on the ransom message (‘Hi Buddy!’), the file-encrypting threat is also known as Buddy ransomware. Thus, in this article we will refer to the threat as…
A new type of ransomware has been detected, and it is a part of the e-mail ransomware viruses. The malware encrypts user files with a strong encryption algorithm and puts the Doctor@freelinuxmail.org e-mail address as a file extension. It also…
We have seen many unexpected things happen in the realm of malware. Creating a ransomware piece based on open-source code uploaded on GitHub for educational purposes is one of them. As a matter of fact, we are not quite sure…
There is a new ransomware on the loose. It is called 7ev3n ransomware. To remove it and see how you can decrypt your files, you should carefully read the whole article. The ransomware searches for files with widely-used extensions and…
LeChiffre is one of the latest ransomware cases that has already affected the systems of three banks and a pharmaceutical company in Mumbai, India. Even though LeChiffre is far from sophisticated, the damages it has caused amount to millions of…
New ransomware infection has been discovered by security researchers. The crypto-malware possibly originates from Russia and demands money from infected users. The ransomware is believed to spread via other malware such as a Trojan or a malicious JavaScript. Everyone who…
New crypto-malware has been detected out in the wild. It is called Rackcrypt and it is also known as MVP Locker. It claims to use a strong AES-256 encryption algorithm to encrypt infected users’ files and extort them for the…
