A new type of ransomware believed to be one of the Troldesh variants has appeared amongst others. It employs the .crypt extensions in a file. It is thought to create files, called cconf.txt and cconf.enc. The encrypted files use a…
Name Type Ransomware Short Description After infection encrypts files important for the user, demanding ransom in bitcoin currency or any other currency paid online. May not restore files after. Symptoms The .txt and .html files on the user Desktop with…
Name Type Spam Email, CTB Locker ransomware Short Description After infection encrypts files important for the user, demanding ransom in bitcoin currency or any other currency paid online. May not restore files after. Symptoms Screen message, Corrupted error message when…
RaaS, or Ransomware as a Service, is a new ransomware that has recently been released in the wild. It is dubbed RaaS for a reason since it allows affiliate parties to generate income by spreading the file encrypting threat. Not…
CryptPKO is regarded as a Ransomware Trojan that encrypts important files and deploys HOW TO DECRYPT.txt file on the victim PC’s desktop. This dangerous threat may be distributed via many methods, main of which are via email, downloads from redirects…
Troldesh ransomware has already been detected and identified by Russian researchers as a file-encrypting threat. As STF researchers enclosed earlier this year, Troldesh attacks the system and encrypts the user’s files, adding an .xtbl extension to them and even renaming…
Reports of a new ransomware have increased, going by the name of decipher@keemail.me since this is the sole piece of info that is published by the attacker(s). Users claim that this type of malware encrypted their files with a particular…
There have been several reports, regarding ‘HELP_DECRYPT’ named files on the users’ desktops that are .png , .url, .txt and there is also an HTML page being reported. These files may be an indicator that there is a CryptoWall 3.0…
A new winlocker has appeared that may block access to a machine and then force the user to complete various tasks to grant his access back to the computer. It is ransomware, that was made to be smarter in some…
Ransomware by the name of Rector (also known as Trojan/Win32.Rector.A, Trojan-Ransom.Win32.Rector or Trojan:Win32/Orsam!rts) has been infecting computers worldwide. The most common way it may be deployed is by email attachment in the form of a document or any other files…
A Trojan-Ransom program has been detected in the wild. As a matter of fact, the threat was first discovered in 2011, but has been recently revived. It is dubbed Trojan/Win32.Rector.a[Ransom] and allows attackers to steal important information from the attacked…
Vicious ransomware now uses fraud click as means of distribution. Another Day, Another Exploit After the Zero-day Flash exploit, the ransomware infection CryptoWall keeps finding new methods of spreading to systems. Now if your device has been hijacked by the…
An “ABOUT FILES!” (*.txt) ransom message has been detected in the wild. If the file is located in all directories on a system and an error_ is added to files with various extensions, then the PC have been attacked by…
The RSA-2048 encryption key typical for Cryptowall 3.0 has been reported to strike users’ computers and display a ransomware message. Thus, the threat is also dubbed Ransomware RSA-2048 or may be referred as RSA-2048 virus. Once activated, the encryption key…
Researchers from Dell SecureWorks Counter Threat UnitSM have uncovered a swift spike of infected user ‘s PCs by Cryptowall resume-based ransomware via concentrated as well as spam emails. The report includes information about an estimate of around 625,000 systems infected…
Security researchers at Checkpoint have recently discovered a new ransom threat dubbed Troldesh. It is also known as Encoder.858 and Shade, and is a Trojan and crypto-ransomware variant. It has been created in Russia and has already affected numerous users…
Locker or as users refer to it – Locker Virus – is classified as a ransomware that encrypts crucial files via the RSA-2048 encryption algorithm. Once the files are encrypted, they will not be accessible until a unique key is…
ai88 ransomware has recently been detected in the wild to attack users, encrypt important files and ask for payment in exchange for file decryption. Affected users are typically displayed a ransom message containing information about encrypted data, deadline and amount…
F-Secure’s researchers have reported that their customers in Italy and Spain have been victims of spam e-mail campaigns initiated to spread ransomware. The spam was disguised as e-mails sent by a courier service convincing the user that a parcel had…
What Is Ransom:Win32/Threatfin? Ransom:Win32/Threatfin is classified as a ransomware that is usually installed via other malware through a backdoor. Ransom:Win32/Threatfin displays a full-screen message that blocks the desktop and makes it inaccessible. Certain files may also be encrypted. The displayed…
