ai88 ransomware has recently been detected in the wild to attack users, encrypt important files and ask for payment in exchange for file decryption. Affected users are typically displayed a ransom message containing information about encrypted data, deadline and amount…
F-Secure’s researchers have reported that their customers in Italy and Spain have been victims of spam e-mail campaigns initiated to spread ransomware. The spam was disguised as e-mails sent by a courier service convincing the user that a parcel had…
What Is Ransom:Win32/Threatfin? Ransom:Win32/Threatfin is classified as a ransomware that is usually installed via other malware through a backdoor. Ransom:Win32/Threatfin displays a full-screen message that blocks the desktop and makes it inaccessible. Certain files may also be encrypted. The displayed…
Bit Cryptor also dubbed BitCryptor is classified as a ransomware considered to be from the CryptoGraphic Locker family. It encrypts the user’s files via the AES-256 encryption algorithm. As a result, a ransom message is displayed on the user’s computer.…
Cryptobot is a piece of ransomware that has the same functionality as many other file encrypting threats. Once activated, Cryptobot encrypts valuable information on the affected machine and demands payment in order to decrypt it. Cryptobot has a Trojan component…
Los Pollos Hermanos Crypto Virus is a ransomware from the family of the infamous CryptoLocker. Los Pollos Hermanos is currently spreading in Australia and possibly other countries. The malicious threat functions as a typical ransomware, encrypting the user’s files and…
Alpha Crypt is a recently released piece of ransomware that is a variation of the TeslaCrypt ransomware. As other threat from the same nature, Alpha Crypt encrypts certain types of files on the compromised machine and demands a payment in…
Ransom:MSIL/Vaultlock.A is a .NET-based threat that can be downloaded on your computer by other malware. Ransom:MSIL/Vaultlock.A is installed as coinvault.exe and upon installation modifies the registries so it would be launched at every system start. The threat is also detected…
Kriptovor is ransomware and infostealer at the same time: it steals information from your system and encrypts your files in order to demand a ransom in exchange for a decryption key. The Nature of Kriptovor The word “kriptovor” derives from…
A new ransomware has been discovered by security experts. The ransomware is dubbed CrypVault and there are some differences in the way it functions compared to other ransomware. The threat also goes by the name BAT_CRYPVAULT.A. Users should not be…
Ransom:HTML/Crowti.A is a ransomware from the Ransom:win32/Crowti family. Once activated, the threat will encrypt certain files on the system and will demand a fee in order to decrypt them. Security experts from Microsoft recommend not paying the ransom. Paying is…
Ransom:Win32/Isda is a ransomware infection that once activated, blocks the access to certain files on the affected machine and demands payment to restore them. Malware experts with Microsoft advise against paying the ransom because there is no guarantee the user…
Another ransomware attack has been detected to invade the systems of Danish chiropractors. The ransomware is dubbed Pacman and spreads via email. The corrupted messages contain a link to Dropbox where Pacman is hidden. Researchers believe the malicious software’s author…
France Ministère de l’Intérieur Virus may be described as a typical ransomware Trojan attack. France Ministère de l’Intérieur Virus comes from the Reveton family. It is also similar to the Ukash Virus because it demands a money transfer via services…
VaultCrypt is a new ransomware infection that has been active mainly in Russia for the past month but is now spreading to English speaking countries. What makes VaultCrypt different than other infamous ransomware like CryptoWall 3.0 and CTB-Locker, is its…
Cryptexplorer.us is reported as a browser locker that encrypts random files on the compromised machine and demands ransom in exchange for the private key needed for their decryption. The payment is processed through the Tor anonymity network. Experts warn that…
A new piece of ransomware, dubbed CryptoFortress, has been reported by French malware researcher Kafeine a few days ago. The threat appears to be similar to the infamous TorrentLocker ransomware, but CryptoFortress is capable of encrypting files over network shares…
TeslaCrypt is a ransomware Trojan that once installed encrypts all the files on the infected machine and demands ransom in order to decrypt them. For the encryption process, TeslaCrypt uses the AES algorithm and creates a ‘HELP_ TO_DECRYPT_YOUR_FILES.txt.” file on…
Coin Locker, also Coin Locker malware or CoinLocker, is a new piece of ransomware that once active on the compromised machine, scans the system and encrypts certain files, leaving the user unable to open them. As a typical ransomware infection,…
Malware experts with Invicea report about a new type of fileless ransomware that has been sent to random users through a corrupted ad-bidding network in order to win an advertising spot on popular web pages. The threat is assumingly created…
