Malware Categories: Ransomware

Vanilla Reload virus is listed as a ransomware. Once it infects your computer, your desktop will be locked and in order to unlock it you will be asked to pay a ransom. As FBI ransomware virus, Vanilla Reload ransomware presents itself as a law enforcement agency as well. They try to create an image of … Continued

Inhale and exhale to prepare yourself for a novel ransomware infection called VapeLauncher. It has been concluded that it is related with an older variant which was discovered in October of 2016. CryptoWire is the sample that inspired the creation of VapeLauncher virus. Its main targets are mostly random computer owners and their unprotected data. … Continued

Vapor ransomware is a cryptovirus developed by Ghosty, DeaDHackS, that started threatening Windows users actively since November 2018. According to cyber researchers, this ransom-requesting virus demonstrates typical ransomware behavior, however, it also possesses another very dangerous quality that other threats are usually just bluffing with, and that is – deleting encrypted files after the set time runs … Continued

Vari is a dangerous program. It locks files, making them unusable and unopenable, and then asks for money (from $490 to $980) to be paid so that the files can be fixed. Vari may also steal some data, such as passwords. It can be deleted, however, fixing your files is another matter that is a … Continued

Vawe is ransomware that encrypts files and marks them with the Vawe file extension. And it gets installed with some other malware, including spyware. The result of a Vawe infection is broken, unopenable files and lots of lost data. Whether the files broken by Vawe can be recovered depends on some circumstances that may be … Continued

VBRANSOM crypto-virus is a return to the traditional values, accepted by ransomware creators. No exclusive features of this sample are emphasized and it appears to be just another malware that encrypts files. Nevertheless, even if we cannot name any extremely innovative features, it still is a threat to the community of the cyber world: you … Continued

VegClass ransomware or [email protected] ransomware is another ransomware virus which makes the Internet users flee in terror. It is associated with Troldesh, a Russian file encryptor, which also appends .xtbl extension using GPG cryptography. These ransomwares (Shade family trojans) are at the top positions in the scale for dangerousness as they install other ransomwares into … Continued

Venis ransomware is another new crypto virus. It has its own payment site at the address venis.pw. Another interesting fact about this ransomware virus is that it creates a user profile on the infected PC. It is believed that Venis file-encrypting malware is still in its developmental phase and, thus, we are going to be … Continued

Usually the creators of ransomware viruses are not focused on good grammar, manners or politeness. VenusLocker virus is a surprising variant, especially when it leaves behind such a detailed and courteous letter of demands. It comprehensively explains the situation and advises to contact [email protected] if infected victims have any questions or concerns. At the end, … Continued

Versiegelt is a German word which means “sealed”. November started with creators of the infamous Jigsaw virus advancing with a German version of their crypto-ransomware. Versiegelt infection seems to be especially fit for detail-oriented Germans: the virus is specific and does not lose its main focus by providing elements that are unnecessary. It uses a clear-cut … Continued

Vesad is a ransomware virus which has the ability to corrupt all of your personal files. Vesad targets computers running the Windows operating system and can manipulate its settings. Vesad should not be taken lightly — some versions have been distributed with a banking trojan. Even after you remove this virus, the files will need … Continued

Vesrato cryptovirus can cost you a lot. Family photos, personal projects, work files are locked by the virus and, while locked, they’re as good as gone. The goal of the developers of Vesrato is to make money from desperate victims who agree to pay a few hundred dollars to get their files back in this … Continued

VHDLocker crypto-virus acquired such a pseudonym because of its feature of gathering victims’ files in a VHD (a.k.a Virtual Hard Disk). This variant does not seem to perceive a necessity of utilizing an algorithm for encryption in order to have leverage over the user. Stationing all of the files in one place and locking it … Continued

Viagra ransomware is a virus that can cause a lot of harm by encrypting your files in a way that they can’t be used anymore. The criminals ask for a $400 ransom to undo this and don’t offer free decryption as proof. There is a high chance that the encrypted files can’t be recovered at … Continued

ViiperWare ransomware virus is one of the freshest crypto-malware samples we can discuss and it demands a very small ransom for file encryption. Only 20 euros are required to be paid in exchange of recovery of files that have an extension of .viiper. Thinking practically, requiring smalls fees for decryption is not a dumb decision … Continued

No, we did not make an error in the word “Vindows”. Apparently, the producers of a new crypto-ransomware variant, based on a HiddenTear project, believe that this is the correct spelling for “Windows”. For this reason we can make a not-so-wild guess about the origin of this virus. Since creators do not seem to be … Continued

Vipasana ransomware (or Vipassana ransomware) another bird of ill omen. In its true sense, the word ‘‘Vipassana’’ refers to a meditation practice in the Buddhist tradition. A quite dissonance for ransomware threats to be called such names. Ransomware viruses bear the highest degree of danger. These nightmarish viruses block the user’s access to his/her data, especially, … Continued

VirLock (Win32) ransomware comes from PE_VIRLOCK ransomware family. VirLock cryptomalware can be labelled as a police virus since it pretends to be a law enforcement agency informing the victim that he/she is soon to face the charges of using pirated software. The hackers employ various logos to be more convincing. They even list the penalties … Continued

Last week on September 15th, 2018 shared on their Twitter about another malware variant attacking French-speaking users called ViroBotnet ransomware or Viro Botnet for short. Although Viro Botnet cryptovirus was able to demonstrate all the ransomware features, the spreading method was noticed to be unfinished and still in development. Actually, the used Outlook email distribution technique is … Continued

Id-[random].[[email protected]].VIRUS – that’s the suffix used by the VIRUS ransomware to label the files it encrypted. Encrypted files are made inaccessible for the user, the decryption tools are being held for ransom by the creators of VIRUS ransomware. The email address in there – [email protected] – serves as a constant reminder that the extortionists who … Continued

Virus-encoder is yet another ransomware infection that might attack your computer and cause a severe damage. If you are reading this article, most probably your computer is already infected and you need a quick fix for that. As you might already noticed, Virus-encoder locks your personal files and asks you to pay the ransom in order to get … Continued

VisionCrypt ransomware virus accomplishes file-encryption process with AES-128 symmetric key algorithm. VisionCryptor.exe is the payload of this infection which is labeled as a Trojan. Several suspicious indicators are distinguished that help us explain technicalities of the latter virus. Its strategies revolve around stealthiness as ransomware attempts to run its course without getting detected. The payload … Continued

VoidCrypt is a ransomware infection. It spreads through RDP accounts, encrypts files, changes their names, and may install additional malware. The extortionists behind VoidCrypt are known for scamming their victims and not restoring data even if the ransom is paid. VoidCrypt primarily uses aliases Spade and Void, but may also use other names – Backup, Encrypted, Exploit, … Continued

Vpsh is a ransomware infection. If it infects your PC, it adds the extension “.vpsh” added to the names of many of your files. For example, “file.doc” becomes “file.doc.vpsh”. Vpsh doesn’t only rename the files – it breaks them, making them impossible to open. It does this to force the victims to contact the criminals … Continued

Cybersecurity professionals this past year have been keeping up with hackers really well, but that was not enough to slow down virtual criminals from releasing new viruses. The beginning of 2019 brought yet another malware discovery, this time Vulston ransomware, which is a cryptovirus. This threat targets Windows operating system and once gets inside the … Continued

Vurten ransomware is a lethal infection that might infect your computer and lock your personal files. As most ransomware viruses, it uses a strong cryptography in order to encrypt files and then asks for a ransom. Usually ransomware viruses ask for something around 1000 USD, however, Vurten really stands out – you will be asked to … Continued

Vvoa is file-encrypting ransomware. It destroys data, but also, it also installs adware and a password stealer. You can recognize Vvoa ransomware by the file extension that it gives the files that it breaks – .vvoa. While there is no simple way to fix the files (deleting the Vvoa ransomware does not do it), there are … Continued

vxCrypter is ransomware first seen on March 29, 2019. It infects your system, encrypts your files so that they become inaccessible, and holds them for a ransom of $100. You will recognise vxCrypter by the “.xLck” extension that is appended to the encrypted files, and by the process name vxDriver.exe that can be seen in Task … Continued

Wal ransomware is a relatively new file-locking virus. It sweeps through the victim’s disk, runs an encrypting algorithm on the files, and hides the key that could unlock them. Now the files can no longer be opened, viewed, or edited. The files that have been encrypted by Wal are renamed by adding a suffix with … Continued

WanaDie ransomware virus is another cheap imposter of WannaCry crypto-malware. Differently from the original infection, the poor-quality copy is loosely based on Hidden Tear open source project like so many other ransomware-wannabes. Many popular security tools already recognize its payload of wndi.exe as malicious and offer its immediate removal. In addition to this, this infection … Continued

Last days of March in 2017 are definitely being noted for a frequent detection of crypto-viruses. WannaCryptor, a.k.a WannaCry, ransomware infection, first surfaced in the very end of this month, approximately in 26th of March. It was possible to trace another product of those hackers that designed this virus. Wcry was the first one to … Continued

When the WannaMad locker infects a Windows PC, it shows a pop-up window in which it threatens that your files “has been encrypted” and that your computer is in danger. WannaMad encrypts files and appends “.hacked” to their names. The extension “.hacked” may be used by file-locking ransomware infections other than WannaMad, although the principle … Continued

Wannasmile Ransomware is a dangerous computer virus that can infect operating system and encrypt files stored on it, asking for a ransom to be paid in order to unlock those files. Even though it looks like it was created by Persians (or at least targeted to Persian market), it can infect any computer worldwide and … Continued

WastedLocker is a type of ransomware, a family of malware that includes Garminwasted, Hard2decrypt, Seccrypt, Viamwasted, and other variants. Attacks by WastedLocker leave files broken, impossible to open. Interestingly, this ransomware creates a separate ransom note for each and every encrypted file. WastedLocker ransomware is known for attacking big companies, but small businesses and individual … Continued

Wbxd is the malware infection that encrypts your files, making them impossible to open, and changes their names to include the extension “wbxd”. It attempts to get you to send hundreds of dollars to cybercriminals to get your data back. In addition, other malicious infections come with this ransomware. They steal private data and display … Continued

Wcry is the new name which will be associated with a ransomware virus. From the looks of this infection, its creators did not incorporate astonishing or grasping features that would be considered as major, but they selected to proceed with a rather routine strategy to disrupt people’s lives. Wcry virus is explained to provoke and … Continued

Werd is a new Djvu ransomware virus that attacks Windows computers and locks user files, like photos, documents, spreadsheets, and just about everything. Werd is named so because the locked files have “.werd” appended to their name. Werd is dangerous and can result in the victim losing all the encrypted files. Werd comes after Nols, Leto, and … Continued

WhiteRose is a new ransomware virus that can hit your system, lock personal files and then ask for the ransom to be paid. Even though it does not belong to any known ransomware family, there are some traits that are very similar to BlackRuby2 virus, which we have discussed earlier this week. Obviously, encryption extension … Continued

Whoopsie Ransomware – extremely dangerous cryptovirus. It falls into the category of ransomware infections due to obvious reasons. Whoopsie has all attributes that are common to ransomware infections, because it is distributed using deceptive methods, infects computers secretly, encrypts personal files using specific cryptography and then demands a ransom to be paid in exchange of … Continued

WhyCry ransomware virus endeavors to create a false impression: it feigns that users are installing an update for their Windows operating system. It features a blue screen which is to be accepted as a legitimate renewal from the Microsoft Corporation. The lock-screen instructs people to keep their devices open during the time that it appears … Continued

Let us present you a guest that you most definitely were not waiting around for. It is a new crypto-ransomware that threatens the security of Internet users by encrypting files and demanding money for the decryption. It is indicated that files will be functional once again if 1 bitcoin is going to reach the creators … Continued

If you are a fanatic of Game of Thrones series, the word wildfire might trigger some feelings. Thrilling emotions might run down people’s spines as they remember the shocking twist in the finale of the season 6. As this episode has just recently aired, we are not going to give anything away, just a small … Continued

IT specialists have noticed an encounter with another scam: Windows Activation Error Code: 0x44578. This exact venture attempts to lure money out of users’ pockets in a very disrupting manner since owners of infected devices noted to be unable to launch their systems properly. Users indicated to startup their computers and tried to access their … Continued

WininiCrypt ransomware virus uses a template of Globe crypto-infection for its ransom note. It could also be identified as another Globe Imposter. However, the differing feature is that the novel sample is written in the .NET framework. The fresh threat resurfaces into the group of ransomware viruses that encrypt files and demand for a payment … Continued

WinLock2 is a typical ransomware infection – if the computer is infected with it, all your files will be encrypted, i.e. locked. In order to retrieve them, you will be asked to pay the ransom. You might be wondering how such a complicated and dangerous computer virus managed to get into your system? Well, you … Continued

It is easy to assume that WinRarer virus won’t inflict encryption on its victims. The main goal of this recently emerged variant is to gather files in one archive and lock it with a complexed password. Or is it? In fact, creators of this infection probably feel that putting files in a secured archive is … Continued