Category: Ransomware

In the forefront of ransomware development, yet another hazard has appeared. Its name is UnblockUPC and it successfully utilizes the techniques that its predecessors use. It stealthily enters the systems and start encryption, after which the ransomware displays a notification with demands for decryption. The instructions for obtaining the decryption key are contained within Unblock your files.html, which states that the victim is punished for visiting illegal sites.

The infection of n1n1n1 ransomware may be considered as a prank or a scareware, as it doesn’t look very hazardous. A meager ransom message and a plainly-designed website don’t give an impression of a serious threat. However, the actions of ransomware leave no doubt that this infection will bring many troubles and place in jeopardy all data kept on the computer.

FenixLocker, or centrumfr@india.com ransomware is one of the newly arose crypto-viruses. This type of threats is especially dangerous, as it is capable of stealth infiltration of a system and then of encrypting almost all of the files present on the computer.

Cerber encryption virus has underwent many changes since its first release, and at the end of the summer 2016 there is a new third version of the ransomware - Cerber3. Most likely this has been done to overcome the free Cerber Decryptor that is able to decrypt the files affected by two previous versions. The Cerber3 threat now adds the .cerber3 extension to the files which are now encrypted individually.

Fantom ransomware does its best to sneak into a system unnoticed and usually it succeeds as it applies to the most innocent-looking disguise. Before starting anything else, Fantom ransomware displays a fake Windows Update screen. This trick works pretty well, as users do not take any actions until the end of the upgrade, and this gives the ransomware some time to encrypt the files.

WildFire Locker is an encryption virus that hijacks valuable data and personal files and then demands a ransom for their retrieval. Once the ransomware lands on the system and gets activated, it designate a personal ID and password to a victim.

It seems that modern ransomware threats renounce the idea of encrypting data, preferring instead total removal of the files. The reasons for this are simple: first, creation of those requires less skills, and second, such approach leaves no opportunity to restore files and thus will more likely intimidate users into paying.

Zepto ransomware is a fraudulent malware that is also known as a successor of Locky encryption virus. As in cases with other ransomware, Zepto installs stealthily and then makes a fraud by hijacking users data and transforming it with an encryption code that needs a unique for every victim key.

Ransomware developers don’t tread water and try to make their products more complicated and adaptive. So, as well as others the creators of CryptXXX improve their malware. The new version of CryptXXX is now called Microsoft Decryptor and has a bunch of peculiarities that differ it from previous editions, however the core features remained the same. Microsoft decrypt still aims for certain files avoiding the crucial for system operation directories and encrypts them with RSA-4096 code. Afterwards, the ransomware displays the note explaining what has happened and how to cancel the drastic consequences of the ransomware presence.

The status of cybersecurity now is so that almost every day a new ransomware is released. Anonpop Fake Ransomware is one of the newest threats terrorizing users by the means of hijacking valuable data. After it detects the files of most common formats and encrypts them, it displays the demand.