Malware Categories: Ransomware

Winsecure is an identified ransomware virus discovered on July 1st, 2018. This malware aims to encrypt personal victim’s files and asks for a 0,05 BTC (the US $335) ransom for a decryptor. Although there is no guarantee that the crooks will unlock your files after your payment, many people fall for this scam and end … Continued

Wizoz is a dangerous program that is used by cybercriminals to extort people for money. Wizoz attacks Windows PCs and encrypts data, making it unusable. You can tell a Wizoz infection because the encrypted files have “[email protected]” and “WIZOZ” added to their names. One way to reverse Wizoz’s encryption is to pay money to the hackers, … Continued

A new variant of Cryptomix ransomware dubbed WORK ransomware was released recently. it was given this name due to obvious reason – extension added to encrypted files is .WORK and all crypto emails related to this infection (there are 5 of them) features a word ‘Work’. While almost all features of Work virus are almost … Continued

The Paradise ransomware infection which has first been noticed around 2017 emerged recently with a few new versions. It attacks computers using RDP and might try to steal banking credentials on top of corrupting all user files. Worm is a file-encrypting virus, a version of Paradise that marks encrypted files with the “.worm” extension. None … Continued

Wrui is a dangerous ransomware infection. It breaks user files, making them unreadable and destroying some or all of their data. Its goal is to force its victims to pay money to the people behind this malware. Supposedly, the extortionists will recover the data that Wrui destroyed if they get paid a ransom. There are … Continued

Wulfric is a ransomware virus that has been around for a few months but hasn’t got popular enough to attract much attention. This virus is not known to be part of any prominent ransomware families and not much is known about it. Still, it’s ransomware and works a lot like the other ransomware infections, is … Continued

Wwka is a dangerous malware infection that attacks Windows computers. It changes the names of files and encrypts their contents, then asks for money to fix the files. To delete Wwka, you can use an antivirus tool. But for many of Wwka’s victims, there’s no easy way to fix the broken files. It is important … Continued

Wyvern ransomware virus belongs to the family of BTCWare that already shelters variants like Master and Gryphon. Wyvern does carry many similarities with the preceding members of this family, but several components differ. For instance, an original extension of .wyvern is appended to files which would be the biggest clue for victims. The full extension … Continued

X3M virus is a recent sample of crypto-ransomware viruses. During the first moments of its discovery, security researchers were confused about this infection because infected victims suggested that their data was prolonged with .locked extension. If you are an old fellow in our site, or any other webpage that focuses on newest malware releases, this … Continued

XData ransomware virus was detected yesterday, on 18th of May. XData is a ransomware, opting to function as a File Encoder. According to the analysis of the msdcom.exe payload, this specific ransomware sample could be distributed with Heur Trojan since many security tools indicated its potential presence. Encryption process that this infection inflicts on digital … Continued

This late July 2018, a new ransomware named Xlockr was noticed in the virtual wild, looking for potential victims who would be willing to pay $100 dollars to unlock their encrypted files. This crypto infection has not been very well researched since it’s fairly new, but the information that we have found is enough to … Continued

Xoza is a file-encrypting virus that holds files for ransom. It’s a new addition to the Djvu family and shares most of its features with its latest siblings, including Reco, Kuub, and Nesa. Xoza is recognized by its renaming of the encrypted files: it attaches “.xoza” to their names. The files marked by this suffix … Continued

It is not clear where did Xxlecxx ransomware came from, but we are completely sure that it is extremely threatful and can cause severe damage to your system. It is a typical ransomware virus – it infects systems, encrypts files and then ask for  a ransom. However, do not rush to give your money away – … Continued

Yakes ransomware is a ransomware-type malware program which means that it encrypts your computer files with complex algorithms and, then, demands money from you for the decryption of the files. Yakes ransomware is categorized as a Trojan virus since it commonly comes disguised in the form of fake e-mail attachments. About Yakes Ransomware When the … Continued

yG ([email protected]) is a cryptovirus. If your files do not open anymore, and if you found a message from online extortionists — someone using the [email protected] email address — your computer has probably been infected by the yG ([email protected]) virus. The goal of yG is to get you to send money to the cybercriminals. The effect … Continued

Ygkz is a malicious program that corrupts files and changes their names to end with “.ygkz”. It may also install other malware. It’s important to remove Ygkz and the other malware. However, getting your data back is a little more complicated. About Ygkz in short: Classification Ransomware, trojan. How Ygkz affects PCs It spreads with … Continued

YOUR_LAST_CHANCE is a cryptovirus based on an older infection called Nemesis. YOUR_LAST_CHANCE on 10 July and is potentially very dangerous, especially to those who don’t have a backup of their data. YOUR_LAST_CHANCE can be removed with the help of an antivirus program, but that won’t fix the files. These will remain encrypted unless a decryption … Continued

“Your computer may not be protected” virus is a trojan that infects MS Windows machines and prevents them from working. The owner is suggested to purchase fake tech support products to remove the made-up virus, while the program itself, which display such suggestions, should be removed. ”Your computer may not be protected” virus is a … Continued

“Your Computer was Automatically Blocked. Reason: Pirated Software” ransomware is a virus that displays a fake warning on the infected computer saying that your computer is blocked and you have to pay a fine to regain access. A program can also encrypt a part of your files with no guarantee to recover them. This type … Continued

Your Internet Service Provider is Blocked virus is a ransomware that is distributed to computers with a help of Trojan viruses. It is a notification message that appears on your computer if your system was infected by PCEU virus. The application completely blocks your system and displays a message saying that your computer work has … Continued

Your Personal Files are Encrypted virus is a ransomware program that can be installed to random computers with a help of Trojan viruses. Trojans are known to install malicious programs to PCs without user’s consent. Once inside, the program is also set to be started automatically every time you restart your computer. Basically, the virus … Continued

Ytbn is a dangerous and potentially devastating PC infection. It encrypts data and then demands a payment in exchange for fixing it. It is likely to be installed with other malware – info stealers and adware. Ytbn ransomware can cause all or almost all the files on a computer to be corrupted. Photos, documents, videos, … Continued

YYTO ransomware virus is a recently-developed ransomware infection and people are already reporting that their personal computers are compromised by this variant. According to the victims who required some assistance, we have been informed that virus does not feature a lock-screen It places two files: help_to_decrypt.txt and read_to_txt_file.yyt that encourage users to download TOR browser … Continued

Zayka Ransomware is just a new member of CryptoMix ransomware family. It is a new version of original CryptoMix infection, that can go by the name of Zayka Ransomware or NOOB ransomware. Even though names are different and extensions they add to the end of locked files are either .ZAYKA or .NOOB, they both use … Continued

zCrypt ransomware is a recent ransomware variant for which encryption has not been developed yet. Though its name is not really sophisticated, zCrypt ransomware bears resemblance to TeslaCrypt, CryptoWall, Cerber and other like ransomwares because it uses asymmetric encryption algorithm to encrypt the victim’s data. It is said to be the newest version of CryptoLocker … Continued

A new Zelta Free ransomware virus, or simply just Zelta, which initiates alterations in Windows operating systems has been found. This variant explains to play a game of Russian Roulette as every 6 hours that victims refuse to pay ransoms, a random file will be chosen to be permanently deleted. This variant also installs a … Continued

Zenis ransomware virus is one of the newest crypto-malware infections we have detected this March. Even though we have found quite a few viruses this month, like Princess Locker 2.0 and ScammerLocker, the newest discovery is more complicated than others. While at first this malware might have resembled a joke (because of the ransom note … Continued

Zeoticus is a malicious program that encrypts user files, making them impossible to read. It then demands payment for fixing the files – a ransom. This ransom can be thousands of dollars, if not tens of thousands. Zeoticus uses file extensions 2020END, pandora, young, etc. to mark files that it has encrypted. There are two … Continued

Zeppelin is a file-encrypting ransomware family. It’s thought to be based on Buran (). You might recognize Zeppelin ransomware by the file extensions that it gives to the file that it encrypts: a set of random 9 digits/symbols or the word “zeppelin”. Even though Zeppelin is known for targeting organizations, individual PC users can also get … Continued

Zepto ransomware is a new version of Locky ransomware released on the 27th of June, 2016. Just as its predecessor, it uses asymmetric (RSA-2048 and AES-128) encryption algorithm. But there are some peculiarities of this new variant. About Zepto Ransomware Zepto ransomware is written in JS (Javascript). Once, it gets into your system, Windows runs … Continued

This week has been specifically “rewarding” in the malware sphere. Security researchers are astonished by the amount of ransomware viruses released in such a relatively short period of time. ZeroCrypt virus is another fresh batch of bitter cookies, distributed in many shifty techniques. Assuming that ransomware viruses are not relevant to you and their activity … Continued

Named after a Tropical Storm Zeta, Zeta Ransomware is yet another attempt to compromise the safety of your computer. Its payload is disguised as a Trojan and weaker antivirus applications might not be able to detect this virus. About Zeta Ransomware Zeta Ransomware is another red-handed virus that performs a series of well-calculated steps to … Continued

Ziggy ransomware has been known since December 2020. It encrypts data and demands a ransom for fixing it. It’s recognized by the “ziggy” extension given to the encrypted files. So far, there’s no way to undo the damage done by Ziggy ransomware. Still, it’s important to remove it and other malware. The criminals behind Ziggy released … Continued

Zimbra enterprise, founded by LiquidSys, provides an open source email platform that is used by over 500 million people around the globe. We have recently found out that a ransomware by the same name has emerged from the ashes. ZimbraCryptor virus or more shortly known like just Zimbra. This crypto-ransomware threat stands out from others … Continued

Lately, new ransomware infections have been popping one after another without interruptions. ZinoCrypt sample features a label “2017 Edition” and it was first detected in late March. It does not appear to be an extremely modern or improved variant from the ones we have already analyzed. ZinoCrypt virus works with complicated algorithms to harm users’ … Continued

Zipe is a dangerous ransomware infection. It attacks PCs, messes with system settings, and then encrypts user files. The files are, in essence, corrupted and broken. They get marked with the “.zipe” extension being appended to their names. Zipe needs to be deleted. Then, the encrypted data can be restored. Although, whether it’s possible to … Continued

Zobm is ransomware, also called cryptomalware. Zobm infects your computer, runs your files through an algorithm that encrypts them (makes them unreadable to you or to computer programs), and then leaves a note demanding hundreds of dollars to be sent to this malware’s creators. Zobm is being used here by cyber-criminals as a tool to perform extortion. What does … Continued

ZOLDON Crypter V3.0 or simply Zoldon is a ransomware virus first discovered and mentioned on Twitter by on August 9, 2018. Zolton virus is a typical crypto demanding threat that locks the files and asks for a ransom. The only different feature is that Zoldon Crypter ransomware does not add the name extension to encrypted … Continued

ZONEware ransomware virus is not a fully completed threat and security researchers indicate it as a poor copy of TeslaCrypt. Currently, it is in development, but it is unknown whether hackers will initiate the necessary improvement to prevent it from crashing. Lack of professional touch was also noticed in InfinityLock crypto-virus as researchers had to … Continued

Zoro ransomware comes from a family of notorious Scarab viruses and can cost you a lot. Since it is a ransomware, it will straight up lock your personal files and force you to pay the ransom in order to receive decryption key which would allow you to get them back . We definitely do not … Continued

ZQ is a recent ransomware virus that is not known to be related to any major family of cryptoviruses. ZQ is traditional file-encrypting ransomware, sifting through the infected system and encrypting all files. Most ransomware infections are very devastating because of the strong encryption, but not in this case. Emsisoft has actually developed a decryptor … Continued

Zqqw is a malicious program. When it attacks a computer, it encrypts documents, photos, and other files. As a result, files can no longer be opened. The people who made the Zqqw malware then ask the victims to pay hundreds of dollars to restore their files. This is why Zqqw is called “ransomware”. While antivirus … Continued

Zscreenlocker is nicknamed as an Anti-Islam ransomware. It deserves such a nickname because of the display of the Ban Islam flag. Interestingly, the hackers uses the gold rhombus and the green field, just like those of the Brazil flag, thus, implying their Brazilian origin. The ransomware was discovered the last week, that is at the … Continued

Zwer is file-encrypting ransomware. It gets downloaded with infected torrents. Then Zwer breaks files, installs a trojan, breaks a bunch of files with the use of cryptography, and then leaves a note demanding for money ($490 or $980). For most victims, there is no easy and free way to restore the encrypted data for free. But … Continued

New crypto-infection Zyka ransomware transmission has been reported. It displays a ransom note with anonymous mask in the background, demanding 170 US dollars (about 0.16891 BTC) or 170 euros (about 0.1818 BTC), whichever victim prefers to send as bitcoins. A quite odd feature of this infection: it provides an opportunity for people to unlock 150 … Continued

Zyklon Locker is a ransomware virus named after the chemical weapon used in the World War II. Discovered by a malware analyst Katja Hahn, it bears resemblance to GNL Locker (read the further paragraph) and is considered to be a modified version of this crypto-malware. About Zyklon Locker Ransomware Once Zyklon Locker penetrates your computer’s … Continued