Malware Categories: Ransomware

Just a few days ago, in early September 2018 shared a Tweet about a newly discovered ransomware called LIGMA. This is one of many cryptovirus discoveries this month, which is going to add additional work for cybersecurity professionals trying to develop decryptors and keeping companies safe, as well as computer owners who must take extra … Continued

LimeDecryptor crypto-malware is also referred to as a Hsociety and BigEyes virus. It is a fresh ransomware sample and it encrypts data with AES algorithm for encryption. The same technique is used by infections like KoreanLocker and Server CryptoMix. The newly-detected virus creates a hidden directory C:\Microsoft\hash which contains the AES key. Damaged files are … Continued

Linkup Ransomware is a malicious program that aims to reveal your credit card details and other personal information in order to get money. The virus mainly targets computer users in Europe. Once inside, it displays a fake warning on your browser that says it was issued by the Council of Europe. The message claims that … Continued

Lisp is file-locking ransomware that renames those files by adding a second extension, “lisp”. In addition, it brings spyware and adware to the infected computer. Lisp is part of the Djvu ransomware family, together with Sglh, Vvoa, and other infections. Lisp in short: Classification Ransomware. How Lisp affects the computer It breaks files, it installs other malware, it … Continued

Litar ransomware, which has just been spotted recently, is a new version of STOP/DJVU — a big family of malware. This virus is created to force the victims to pay money for the opportunity to get their files back. Litar’s developers are cybercriminals who profit from cyber extortion. Their viruses get into a system and … Continued

Looks like a new virus is attempting to extort people of their money — Litra ransomware. Litra can be recognized by the “.litra” extension appended to each encrypted file, as well as a pop-up window that announces “All of your personal files including documents, pictures, texts and other sensitive data are encrypted.”. Litra lands on your PC, … Continued

LittleFinger is a new ransomware virus discovered by on May 30th, 2018 and named by malware analyst . This dangerous crypto-extortionist is believed to be still in development but most antivirus programs do recognize it as a malicious threat, according to . Although LittleFinger asks for one of the smallest ransom (0.01 BTC = $75) compared … Continued

LLTP (Locker) crypto-virus is classified among ransomware samples that use a combination of ciphers to complicate the decryption process for its victims. An AES algorithm is first applied to ruin data with the public encryption key, while the private key is encrypted with a RSA cryptography. After these are processes are concluded, users’ data is … Continued

Security researchers are overflowing with ‘gratitude’ for open-source projects: reasons for their appearance are identified rather vaguely, but some are eager to believe that they were definitely not seeking to assist hackers. 2017 became the year when a bunch of RaaS services surfaced, helping amateur, striving hackers to play around with ransomware. However, such novelties … Continued

Lmas is a malicious program, file-encrypting ransomware. It spreads with pirated programs and infects Windows computers. It encrypts files and gives their names the suffix “lmas”. And then, the lmas malware leaves ransom notes that ask the victims to pay hundreds of dollars if they want to get their data back. Together with urnb, fdcz, and … Continued

Lock93 ransomware comes from Russia. It was discovered by MalwareHunterTeam on the 22nd of October, 2016. A thorough analysis of this new ransomware virus will be implemented as soon as the sample of the virus is received. For the time being, it is our job to introduce you with Lock93 file-encrypting virus so that you … Continued

Lockbit is file-encrypting ransomware that targets organizations that are seen as potentially lucrative targets. However, small businesses and even individual users suffer from this infection, as well. Lockbit is file-encrypting ransomware, but it also steals data and threatens to release it, making it a double extortion threat. For now, there is no way to decrypt … Continued

LockCrypt ransomware virus is an immensely alarming infection that commences the process of file-encryption, supported by an AES cipher. Virus suggests that the exact ransom depends on the fact whether victims are quick enough to contact the indicated email addresses. [email protected], [email protected] are the addresses, belonging to hackers of this sample. There are a few … Continued

Locked_File ransomware virus is one of the recently-detected malware infections. Similarly to SyncCrypt and Karo crypto-viruses, the newest addition will encode files with AES cryptography method, meaning that users will be forced to be in mercy of vicious hackers. Investigation so far suggests that the ransomware uses the same filemaker at the end of files. … Continued

Locked-in virus is not a threat that security researchers have to focus on anymore. Why? This version was discovered to be not too complicated since a free application for decryption was designed. Victims can download the constructed tool and restore encoded files that are appended with .novalid extension. Attention that crypto-ransomware viruses receive is gradually … Continued

LockedByte ransomware virus is one of the latest samples that attacks operating systems and pursues the goal of file-encryption. This variant uses a relatively rare routine to ruin files: XOR encryption. Payload of this infection has determined to be LockedByte.exe which initiates not only the corruption of files, but also sets up a lock-screen to … Continued

Locker virus is yet another ransomware that enters computers secretly, encrypts files stored on the hard drive and asks for the ransom in order to decrypt files. The ransom itself is not very big (it’s 1 BTC and at current rate it’s about $240) so if you have lost some very important files, you might want to think … Continued

LockeR ransomware virus uses a very straight-forward name, considering the fact that the infection encodes data with a combination of RSA-2048 and AES-256 algorithms for encryption. Just like with the My Decryptor crypto-malware, victims of Locker will also be urged to enter one of the Lockerrwhuaf2jjx.onion.link TOR websites for more explicit instructions and demands. The … Continued

LockLock is a new ransomware variant developed from the evergreen earlier open-source EDA2 ransomware. On an interesting note, LockLock ransomware has already attacked users from China, as it can be deducted from the IP addresses. But its expansion on users of other countries cannot be denied, especially, when its ransom note is written in English. … Continued

LockOn Virus, also known as Lockon ransomware, is extremely dangerous infection that can drive you crazy. It can also be listed as a trojan, however, due to the fact that it requires ransom, it is fair to say that LockOn is a ransomware. In case you are a victim of this infection – proceed reading … Continued

Locky Imposter Ransomware – nasty computer virus that originates from notorious Locky ransomware. And it’s not only because of the name – those viruses are also very similar technologically, they act the same way. While it is obvious that Locky Imposter is trying to repeat the “success” and infections rates of Locky, it is not … Continued

Locky virus is one more dangerous ransomware that locks personal files of computer users and asks them to pay a ransom if they want to retrieve their files. This ransomware changes the names of the encrypted files to a unique 16-character combination of letters and digits and adds the .locky file extension. According to the … Continued

.lockymap virus is the name of ransomware infection that can lock your personal files and add this extension to the end of them. It is a typical ransomware virus that only aims to infect as many computers as possible and then try to force users to pay the ransom. If your computer got infected with .lockymap, … Continued

Lokas is a virus that infects Windows computers and encrypts files to make them inaccessible to the user. The people responsible for this virus ultimately seek to make money off of their victims by convincing them that their files will be fixed for payment. Luckily, there are a few other options for restoring the files. … Continued

Lokf is a file-locking virus that turns use files to “.lokf” files. This virus was created as part of an extortion scheme – cybercriminals break your files and then ask for money (a few hundred dollars) to fix them. Possibly, they also distribute a spyware virus to steal data like passwords saved in the browser. … Continued

Loki Locker is a malicious program that infects Windows PCs and encrypts files. It then asks the victim to contact the cybercriminals responsible for the infection and to pay them to fix the broken files. Encrypted data can’t be read, and if it’s not decrypted, then it may as well be lost. There are a … Continued

Lolita is the name of the ransomware virus that can severely damage your system and lock almost all personal files that are stored on the hard drive. It’s believed that Lolita is a new version of infamous Scarab ransomware. It seems like lately a lot of cyber criminals decided to take a path that was set … Continued

LooCipher is a file-locking virus. Not only does it change your desktop to a message starting with “All your important files are encrypted!” and rename your files with an “lcphr” extension, it also encrypts the files to make them inaccessible and nonfunctional. LooCipher is a dangerous and harmful virus that should be taken seriously. Although … Continued

Lost_Files_Encrypt is the file extension that’s an obvious symptom of the Lost_Files ransomware, an infection that tries to get the victims to pay money in exchange for having their files restored. This ransomware targets Windows computers and is spread by a fake Microsoft email. It was . Ransomware is the type of malicious software that … Continued

Lotej is a virus that’s actually serious. It’s ransomware, but not the type that only locks the screen or hides the user interface. It does more than limit your access to your computer. Lotej accesses nearly all the files that aren’t necessary for Windows to run and encrypts them using a secure algorithm, hiding your … Continued

The newly-discovered Lotep virus is file-encrypting ransomware, and those hit by it wish to remove it and restore their files. While the latter may be impossible, that depends on each victim’s circumstances. The criminals responsible for Lotep demand a sum of money for fixing the files they broke, but they should not be listened to. … Continued

LotR is a file-encrypting virus, ransomware, that restricts the victim’s access to their files by encrypting them — scrambling their contents and making the files unusable. Then LotR demands money in exchange for the decryption key, which only the developers of LotR have. The LotR is probably part of the big GlobeImposter family. LotR is … Continued

LOVE is a ransomware infection, also known as a . The developers of this malware seek to extort money from people by locking their files away from them. This is one of the most dangerous types of malware. What does the LOVE malware do? The LOVE cryptovirus, once it is on a computer, starts finding and encrypting … Continued

A new crypto-ransomware figure has emerged from the gloom of hackers’ lair. The first report about this sample reached security researchers a couple of days ago and the victim provided primary information about the infection. It was decided to name the incoming ransomware variant LoveServer due to an email address, indicated in the ransom note. … Continued

LowLevel04 ransomware was discovered in the October of the last year, that is 2015, and it continues to attack vulnerable machines. This file-encrypting ransomware has been active particularly in Greece and Bulgaria, attacking servers and, thus, making companies its main target. While the hackers have been reported to have IP addresses, which point to the … Continued

Lukitus ransomware virus is another version of Locky infection: its creators have recently been caught occupied with Diablo6 malware as well. The recent variant threatens people and disrupts their operating systems in a very analogous manner, but appends a unique extension of .lukitus. The quickly-spreading Locky virus, controlled by the sharpest hackers, has received approximately … Continued

Lyli is Djvu-type ransomware. It uses cryptography to break files, then asks you to pay to get them back. Its symptoms include many of your files becoming the type LYLI and a second file extension “.lyli”, adware being installed. Lyli is dangerous because it could cause you to lose your files if you didn’t have … Continued

During one summery day in July, we composed an article, discussing a dawn of CuteRansomware virus. We emphasized a detail that this infection attempted to inflict on Chinese-speaking users, but also stressed out the importance of bearing it in mind that ransomware viruses are unpredictable. my-Little-Ransomware (CuteRansomware) has not been identified among the most sufficient … Continued

One of the latest ransomware samples is curable without the necessity of sending transactions of BTC to creators of this virus. IT specialists have diagnosed an appropriate recovery treatment for users that have fallen into despair due to dastardly M4N1F3STO virus. Ideas about to which category this infection belongs to fluctuate from referring to it as … Continued

MADA Ransomware is an ultimate threat for your files and overall state of the computer. Although it’s not a new player in the viruses market – technologic aspect of this threat is based on Jigsaw ransomware, which was first detected back in 2016. So what exactly is a ransomware infection? It is a kind of … Continued

MadBit – a dangerous computer virus which employs AES encryption algorithm to encrypt your personal data and force you to pay for it. This kind of virus is listed as ransomware infection and is one of the most dangerous viruses that you can possible get infected with. If you were unlucky enough and your computer … Continued

Madek is the name of a file-locking virus that demands $980 for selling you access to your own files. This ransomware is a new version of STOP/Djvu and comes after a long chain of versions, including Drume, Kroput, and Berosuce. These viruses spread using cracks, activators, disguised software, and pirated files. The distribution tricks the … Continued

Did you become unable to open and read your files, which now have MADO as their file type? Mado is ransomware, and it encrypts files and adds “.mado” to the end of each of their names. It may also install spyware and adware, causing pop-up ads to appear on your screen. To stop victims from … Continued

MafiaWare Ransomware is a dangerous virus that can infect your system and do a significant damage to it. Ransoware virus locks all files stored on the system so the user can no longer use them. In order to retrieve them they are forced to pay a ransom. If it happened to you, you have come … Continued

Magician RSWware is the newest based crypto-malware. Just like the other Kypton, ScammerLocker, Sorry ransomware it uses an open source code and encrypts the files, later on asking for a 0.033 BTC (approx. $234 dollars) ransom from the victim to restore the locked files. What is interesting about Magician RSWware crypto-virus is that, unlike other … Continued

Magniber ransomware virus is not a new cyber threat; the crypto-virus debuted in October of 2017 and continued on remaining a mystery for security researchers until 2018. Right from the beginning, researchers determined that the ransomware is being distributed by the Magnitude exploit kit which is related to the Cerber crypto-virus, and might have been … Continued

Mahasaraswati ransomware is a recent ransomware threat named after the eight-armed Hindu goddess. The ransom note of this cryptomalware has this goddess in the background. Mahasaraswati encoder just like TeslaCrypt, CryptoLocker and CryptoWall ransomwares (just to name a few) uses asymmetric encryption algorithm to corrupt the victim’s data. About Mahasaraswati Ransomware Once Mahasaraswati ransomware is … Continued

Makop-Oled is file-encrypting ransomware. A malicious program that uses cryptography to corrupt the data on the infected computer. The only way to fix the data is by receiving a unique decryption key from the people in control of Makop-Oled ransomware. Makop-Oled is really a family of ransomware infections that includes Makop, Origami, Zbw, and possibly … Continued