Ransom:HTML/Crowti.A is a ransomware from the Ransom:win32/Crowti family. Once activated, the threat will encrypt certain files on the system and will demand a fee in order to decrypt them. Security experts from Microsoft recommend not paying the ransom. Paying is…
Ransom:Win32/Isda is a ransomware infection that once activated, blocks the access to certain files on the affected machine and demands payment to restore them. Malware experts with Microsoft advise against paying the ransom because there is no guarantee the user…
Another ransomware attack has been detected to invade the systems of Danish chiropractors. The ransomware is dubbed Pacman and spreads via email. The corrupted messages contain a link to Dropbox where Pacman is hidden. Researchers believe the malicious software’s author…
France Ministère de l’Intérieur Virus may be described as a typical ransomware Trojan attack. France Ministère de l’Intérieur Virus comes from the Reveton family. It is also similar to the Ukash Virus because it demands a money transfer via services…
VaultCrypt is a new ransomware infection that has been active mainly in Russia for the past month but is now spreading to English speaking countries. What makes VaultCrypt different than other infamous ransomware like CryptoWall 3.0 and CTB-Locker, is its…
Cryptexplorer.us is reported as a browser locker that encrypts random files on the compromised machine and demands ransom in exchange for the private key needed for their decryption. The payment is processed through the Tor anonymity network. Experts warn that…
A new piece of ransomware, dubbed CryptoFortress, has been reported by French malware researcher Kafeine a few days ago. The threat appears to be similar to the infamous TorrentLocker ransomware, but CryptoFortress is capable of encrypting files over network shares…
TeslaCrypt is a ransomware Trojan that once installed encrypts all the files on the infected machine and demands ransom in order to decrypt them. For the encryption process, TeslaCrypt uses the AES algorithm and creates a ‘HELP_ TO_DECRYPT_YOUR_FILES.txt.” file on…
Coin Locker, also Coin Locker malware or CoinLocker, is a new piece of ransomware that once active on the compromised machine, scans the system and encrypts certain files, leaving the user unable to open them. As a typical ransomware infection,…
Malware experts with Invicea report about a new type of fileless ransomware that has been sent to random users through a corrupted ad-bidding network in order to win an advertising spot on popular web pages. The threat is assumingly created…
CTB-Locker, also known as Critoni Ransomware, is a Trojan that encrypts the files on the infected computer and blocks the user’s access to his data. Critoni Ransomware displays a ransom message demanding a high price for the decryption of the…
A new ransomware CryptoTorLocker2015 has been recently detected, and it proves that ransomware doesn’t have to look realistic in order to scare users into paying the ransom fee. How Is CryptoTorLocker2015 Different from Other Ransomware? CryptoTorLocker2015 is a typical ransomware…
A ransomware Trojan, Threat Finder encrypts the files on the compromised machine, locks the computer and demands a $300 fee in order to restore the encrypted data. Experts suggest that the currently spread version Threat Finder v4.2 is a copy…
Trojan.Ransomlock.G, also known as Reveton, is a family of ransomware Trojans attacking users mainly from the United States, Canada, Europe and some parts of the Middle East. Its purpose is locking your system and scaring you into paying a ransom…
A new and improved variant of the CryptoWall ransomware has been infecting computers worldwide in the past few days. The new CryptoWall 3.0 uses a localized ransom message and passes traffic to a website where the victims can pay for…
Cryptorbit ransomware is an infection that locks the screen of the compromised machine and denies access to the desktop until a fee has been paid. Cryptorbit has practically the same behavior as other known ransomware like CryptoLocker and Prison Locker,…
Circulating for the past few weeks, Buyunlockcode.txt is ransomware that encrypts your files and requires ransom payment in order to unlock them. What Is Buyunlockcode? Buyunlockcode is a typical ransomware, belonging to the same group of infections as Cryptographic Locker,…
Malicious ads leading to a ransomware infection have been served to the visitors of a few popular websites, among them gamezone.com and the Huffington Post in last days of the year. The malvertising campaign was first spotted by researchers at…
‘Windows Genuine Advantage’ ransomware belongs to the same family of Trojans as West Yorkshire Ransomware and has the same pattern of infection. But unlike the other members of this malware family, which use pop-up notifications claiming that the user is…
Ransom:Win32/Criakl.C, as the name suggests, is a ransomware spread as a legitimate-looking application that can be downloaded online. Once installed, Ransom:Win32/Criakl.C will encrypt a number of files on the affected computer, and demand a ransom for their decryption. According to…
