KEYHolder is a typical ransomware infection. Once in the system KEYHolder encrypts certain files on the compromised machine and demands $500 in order to restore them. KEYHolder scans the affected computer for documents, images, videos and other files in could…
If a message stating that your computer has been automatically blocked due to pirated software appears on your screen, you are dealing with another piece of ransomware. The victims will then be asked to pay a ransom in order to…
CryptoWall ransomware has hit a sheriff’s office computer system in Tennessee, encrypting 72 000 files. The system was compromised at the end of October as a malicious ad on the webpage of a local radio station was clicked by a…
A phishing campaign merging two of the most hated tools of the digital era – ransomware and Gatsos – is gaining popularity these days. The ransomware is delivered with an email purporting to be from the Office of State Revenue…
Experts have detected a new file-encrypting ransomware, dubbed SuperCrypt, in the middle of October this year. Like another popular ransomware like CryptoWall and CryptoLocker, the recently reported SuperCrypt encrypts certain files on the compromised computer and displays a ransom message…
Microsoft Research Team has detected a spike in a piece of system-locking ransomware similar to Cryptolocker, dubbed Crowti. Crowti has been around for a few months now, but researchers have noticed its activities in mid-October. In the peak of the…
The latest version of the Koler ransomware, known to target Android-operating devices, spreads through SMS messages. The malicious message contains shortened bit.ly URLs that direct to the infected .APK. Once the user has opened the corrupt file, the screen of…
It has been recently revealed that the CryptoWall 2.0 ransomware was a part of a huge malvertising campaign targeting popular websites like 9Gag, AOL, Yahoo, etc. Around three million users a day were exposed to the latest version of the…
830,000 machines were compromised by the CryptoWall ransomware worldwide only in the last month. This marks a 25% jump in the infections compared to August 2014. 40,000 victims alone were located in the UK, with 75 from them paying the…
Security experts reported a malicious email attack a month ago, which lured the users into opening bogus online airplane tickets. Apparently the campaign is still active and uses the same trick. The malicious email contains detailed information about an airplane…
TorrentLocker, a ransomware similar to CryptoWall and CryptoLocker has reached Italy and Brazil. Thousands of machines are infected with the file-encrypting malware. 53,35% of the total infections worldwide are detected in Italy, followed by Brazil with 26,27%. TorrentLocker Infections Peaked…
The Koler ransomware has a new version in the wild that replicates automatically. The new Koler sends SMS messages to the compromised device’s contact list. 75% of the infected devices are located in the US. Koler is configured as a…
What Is CryptoWall 2.0? The CryptoWall ransomware has been an enormous threat for network administrators and PC users, ever since it was initially released because it encrypts the local data as well as data found on network shares. The new…
In the last month or so, malware researchers from Trend Micro have been observing malicious ads, a part of which were displayed on YouTube that have redirected over 113 000 users to harmful webpages. Reportedly the cyber crooks have managed…
The ransomware CryptoWall has now been updated to 2.0 version which appears to be almost the same as the 1.0 one but with few changes. CryptoWall, along with CTB-Locker are the two major ransomware families being followed this summer. In…
Five of the top-ranking websites were recently attacked by CryptoWall that was archly delivered through a Malvertising Campaign. In the beginning the antivirus engines failed to detect the threat and thus, the five websites were displaying advertisements that were redirecting…
The editor of Dark Reading Tim Wilson recently raised an provocative question in a comment he placed on the blog of Sara Peters, named “CryptoWall More Pervasive, Less Profitable than CryptoLocker”. Mr. Wilson provoked the security experts to share their…
What Is SynoLocker and How Does It Work? SynoLocker is a file encrypting ransomware that targets Synology NAS (Network Attached Storage) devices. What this particular piece of ransomware does is to exploit vulnerabilities in the DSM operating system. It targets…
Finnish researchers Antti Nuopponen, Patrik Nisén and Taneli Kaivola of Finnish consultancy Nixu discovered how to decrypt the files that have been encrypted by the recently spread TorrentLocker ransomware without paying the required fee. All the user needs is the…
After the successful law enforcement operation in late May that took the Gameover Zeus botnet down, CrypoLocker was almost crushed. Yet, new ransomware arises. Along with the Gameover Zeus network of infected computers, a ransomware campaign was compromised as well…
