Update! Research indicates that current versions of PowerWare append the .locky file extension to the victim’s encrypted files, drop the same ransom notes as Locky, and even use the same graphics and phrases on their ransom payment site. The good…
A new type of Lockscreen Trojan that belongs to the Police variants has been discovered out in the wild. The malware arrives directly from foreign hosts, creates multiple files and registry objects. After this it restricts the user access to…
Update! A researcher from Heise Security, Fabian Scherschel gave an analysis report of the ransomware, in German. In there it is written that the first phase encryption used by Petya is a simple set value XOR of the Master Boot…
Update! Apparently, a new variant of this ransomware has been spotted in the wild. The new variant bears the name of Rush ransomware and encrypts files with a .crashed extension. For more detailed information, take a closer look at the…
A very well concealed and effective ransomware has been reported to encrypt user files with the .rokku file extension. It is known as Rokku Ransomware, and its malicious files have a very low detection rate by antivirus software. Users who…
Another ransomware has been reported to wreak havoc on a massive scale. It is known as MakTub Locker and it encrypts the user files with a strong cypher. The crypto-malware then leaves a ransom note giving the user a deadline…
A new Android Lockscreen type of ransomware which belongs to the police impersonator viruses has been detected out in the wild. The questionable Trojan enters through users via suspicious applications or by visiting malicious web links via your phone. What…
A new ransomware, carrying the vulgar name of its ransom email address, redshitline@india.com has been reported to be massively spread. It encrypts the user files with a strong cypher and uses the ransom email plus a .xtbl file extension after…
The fourth “installment” of TeslaCrypt is here to terrorize you and make your day a lot worse. The crypto-malware now uses significantly stronger encryption. Not only this, but TeslaCrypt 4 also has fixed bugs and is now able to encrypt…
A new ransomware has been reported to extort users by encrypting their data with a strong encryption algorithm. It leaves an email address of the cybercriminals after it encrypts the user files leaving them unable to be opened. On top…
A new ransomware has emerged. Its name is Crysis, and it sets the extension .CrySiS to encrypted files. RSA algorithm and AES ciphers are combined for the encryption process. The ransom note is set as a picture on the desktop…
A new ransomware has been reported to cause devastation and problems to the user. The crypto-malware uses scraped ransom messages from other notorious ransomware, such as CryptoWall 3.0. It arrives via other malware on the user’s computer and once executed…
In case you haven’t heard – the very first ransomware to successfully attack Mac has already surfaced the Web, spreading via the hacked Transmission BitTorrent client for Mac. The ransomware, dubbed KeRanger (Ransomware.OSX.KeRanger), has been identified as the very first…
This article is to help you remove Cerber ransomware and decrypt encrypted files for free. Cerber ransomware is a dangerous crypto infection that infects computer systems with the goal to encrypt valuable personal files. Then it demands the user to…
We have already seen malware that speaks (literally). Fake tech support scam pages often implement voice-over messages. And it is easy to assume why. You would definitely feel panicked if your computer started repeating that all your personal information was…
A new ransomware, observed to be a variant of CryptoWall, has been reported to infect users on a massive scale all over the world. The most notorious ransomware, CryptoWall, detected as “Cryptodefense” by Symantec researchers, has been reported to have…
Unfortunately and quite alarmingly, malware and ransomware attacks on hospitals and healthcare organizations are happening every other day. The attack on the Hollywood Presbyterian Medical Center will not be the last one. Three German hospitals have been hit by ransomware,…
A new version of the recently appeared PadCrypt ransomware, resembling Cryptolocker includes several new features which are seen for the first time when ransomware infections are present. The ransomware is believed to use an encryption algorithm of “Suite.B” encryption standard…
Locky ransomware is the latest devastating member of the ransomware family that employs strong encryption and is used in targeted campaigns. For example, the Hollywood Presbyterian Medical Center was indeed attacked by Locky, as disclosed by security researchers. Thanks to…
If you follow IT security news, you most definitely have heard that the Hollywood Presbyterian Medical Center was hit by ransomware. Consequently, the Center decided to pay the ransom, realizing that they had no choice. However, the claim that the…
