Malware Categories: Ransomware

Delta is a new ransomware infection, named so after the new file type extension that it gives to encrypted files (.[Delta][random]). Delta ransomware is associated with the email addresses [email protected] and [email protected]. It’s best to avoid contacting the people behind Delta ransomware and look into other ways to possibly get your files back. That is, after deleting the … Continued

Den Svenska Polisen IT-Sakerhet virus (aka Polisviruset) is a ransomware that attacks computers in Sweden. The program displays a message on the infected computer where it uses the name of official Swedish authorities. The text of the notice accuses users for making several crimes related to watching and distributing pornographic content and tells to pay a … Continued

Many people hold Christmas as an especially sacred holiday, when even hackers should forget their dirty goals and enjoy a glass of hot wine. Nevertheless, their actions do not cease even during the innocent holidays like Christmas evening. One of the security researchers discovered DeriaLock, a virus that is definitely not feeling the benevolent spirit … Continued

DeroHE ransomware is a malicious program that was spread in fake promotional emails. Cybercriminals who hacked a legitimate website attacked its registered users and tried to get them to download malware. This malware – DeroHE ransomware – can encrypt user files, which results in these files being corrupted and impossible to open. DeroHE ransomware is … Continued

Did your files suddenly all turn into Derp type and now all the programs refuse to open them? Despite the funny name, this ransomware is very serious, powerful, and possibly devastating. It’s a new incarnation of Djvu and it can result in all the broken files being lost completely if you don’t have a backup of … Continued

Desu Ransomware – very dangerous computer virus that can encrypt your personal files and demand for a ransom in order to unlock them. That’s a typical scheme of cyber criminals operating ransomware infections. It can cause severe damage to your system and you can get ripped off if you decide to actually meet their requirements … Continued

DetoxCrypto ransomware is a brand new ransomware threat detected by MalwareHunterTeam. It passes itself off as PokemonGO ransomware. Regarding the popularity of the authentic PokemonGO application, it is no surprise that cyber crooks put their hands to designing malignant programs for deceiving unsuspecting users. Moreover, DetoxCrypto ransomware virus can be distributed in another variant, known as … Continued

DevNightmare ransomware is a new ransomware virus based on the first open source code ransomware project Hidden Tear. So the method of encryption it utilizes is the popular one – the asymmetric encryption algorithm. It gives the feeling that the hackers, who released this new spin off of Hidden Tear, wanted to make quick profit … Continued

Dharma-Btc is a ransomware that originates from the notorious Dharma virus. It’s considered to be a new variant of original Dharma infection and it’s not less dangerous. It was recently discovered by cyber security researcher Jakub Kroustek. Same as its’ predecessor, Dharma-Btc can cause a lot of problems by encrypting files stored on the hard drive of … Continued

Dharma ransomware was reported to be infecting workstations two days ago, on the 16th of November, 2016. It has been reported to infecting single as well as network computers. On an interesting note, sometimes the virus leaves some of the network computers untouched. In addition to this, this queer ransomware may not leave the ransom … Continued

Do you remember infamous Locky ransomware? Well, it seems like this infections has resurrected in slightly different form and completely different name – please welcome Diablo6 ransomware virus. This virus uses the same cryptographies as Locky Ransomware – RSA-2048 and/or AES-128. Those are pretty strong cryptographies that can completely lock your files – it can … Continued

Diamond Computer Encryption ransomware virus is a unique infection despite functioning on a similar level as the preceding infections we have discussed. Exactly like ABCLocker or KillSwitch malware samples, the new variant is based on Hidden Tear open source project. Without any surprise, such copycats of HiddenTear usually direct an AES cipher to encode executables … Continued

Diavol is new and dangerous ransomware. It encrypts files, breaking them, and appends “lock64” to their names. Then, it asks victims to pay money if they want to get their files back. Cybersecurity researchers suspect that Diavol ransomware may be developed by the same group of criminals who are responsible for TrickBot, a dangerous spyware trojan. … Continued

Digisom Ransomware is a very dangerous virus that might infect your computer, lock files stored on it and then demand ransom in order to retrieve those locked files. If it happened to you and you don’t know what to do, you’ve came to the right place. In this article we will provide you with instructions … Continued

DilmaLocker ransomware virus is a Brazilian malware sample. We have already observed a few ransomware infections that are targeting Brazilian people: TeamXRat is one of them. The newest sample appends an original extension of .__dilmaV1 to the encoded digital data. RECUPERE_SEUS_ARQUIVOS.html file serves as a ransom note and provides hackers’ demands in the Portuguese language. … Continued

DirtyDecrypt virus, also sometimes referred to as Revoyem, was first noticed by security researchers at the summer of 2013. Three years later, 2016 became the year to congratulate the return of the updated crypto-ransomware virus. DirtyDecrypt is one of the big whales, during its long career having been successful enough to block access to victims’ … Continued

DiskDoctor is another ransomware infection that is really similar to Scarab ransomware. In fact, it originates from the same malware family. This virus is very dangerous because it can completely lock most of your personal files and in order to retrieve them, you will be forced to pay a ransom. The main goal of DiskDoctor … Continued

District ransomware refers to a cryptovirus that has been active since October 2018 and first reported to the public by the malware expert . This ransom demanding threat aims to compromise victims’ computers by locking all the personal files and requesting money in exchange for the decrypting key. This scary ransomware is spreading all around … Continued

Divinity is a malicious program, file-encrypting ransomware. It infects Windows computers, locks files (and changes their names to end with “.divinity”), and then asks the victim to write to the extortionists on Telegram or Twitter. Ransomware such as Divinity is used by cybercriminals to extort people for money. The victims are promised to be given … Continued

DJVU Ransomware (also known as STOP ransomware) is a relatively new parasite family — a big group of cryptoviruses, each of which has a unique extension that they append to the name of the files that they affect. Names like .kroput, .gero, .nasoh, .dodoc, .vesad, .drume, and many others all belong to DJVU. These viruses … Continued

DMA-Locker is another ransomware that infiltrates into random systems and encrypts stored data. Usually it comes to computers using spam mail attachments. It is a fraudulent computer infection that destroys users’ files which are nearly impossible to recover. This article covers all you need to know about this malicious application, how to avoid it and … Continued

Dodger ransomware is a file-encrypting virus released by the people behind the [email protected] e-mail. Dodger , probably still in development, which is why it’s laking some of the usual ransomware features — like the ransom part of the virus. What a Dodger infection looks like Dodger-encrypted files can be recognized by the double extension, with the … Continued

Dodoc is a file-locking virus that can corrupt all the files on a computer and demands money for restoring them. Unfortunately, this extortion scheme doesn’t always end well, even for those who paid the ransom for their data. Dodoc is a serious computer virus with significant real-life consequences. The consequences of losing one’s data stored … Continued

Crooks are starting to make a complete mockery out of viruses. Domino crypto-ransomware is a recently discovered infection and we cannot help but to find it extremely quick-witted. While making references to Game of Thrones, it also manages to be a serious virus that has to be dealt with. Like any other ransomware disease, Domino … Continued

Domn is a new type of Djvu ransomware. It’s incredibly devastating and can cause tremendous damage to the files of the infected computer, to the point where the files are unusable. Additionally, a password-stealing trojan is likely installed together with Domn, which makes the infection potentially very dangerous. Domn is file-encrypting ransomware. It exists to lure … Continued

Donut virus is a ransomware that sneaks into your system unnoticed, encrypts the files with sophisticated cipher and asks for a cryptocurrency ransom in exchange for a decryptor. It was first reported by the malware researcher on Twitter this Saturday, June 9th, 2018. While most of us associate donuts with a very pleasant experience, this … Continued

Dotmap is ransomware — a type of computer virus that restricts the victim’s access to their computer or files, and demand money for fixing the situation. Files locked by Dotmap have the .dotmap extension, with the file names having .dotmap appended to their names, like picture.jpg.dotmap. If you find this happened to you, you must … Continued

Dragon ransomware is identified as that in the ransom note #DECRYPT_MY_FILES#.txt that this malware drops in your folders. Dragon scans your files and edits them in such a way that they’re unopenable, marked with the “.locked” extension. The developers of Dragon demand a lot of money for unlocking the files, luckily, a free and independent solution … Continued

Would you like to pay $490 for the ability to use your own files? That’s what Drume ransomware will offer after it enters your computer. This severe infection is going to encrypt most of your personal files stored on the hard drive, so they can be kept as a hostage. Also, $490 is considered to … Continued

Dxh26wam crypto-virus targets people from all around the globe: from United States of America to China, Italy, France, Germany, Spain, Portugal and Netherlands as ransom notes can be customized in these languages. The randomly-looking title that this ransomware has actually derived from the payload that this infection contaminates devices with. Malware shows a window with … Continued

DXXD ransomware was detected on the 26th of September, 2016. As you can see, it is a completely new ransomware threat released. Luckily, it has already been decrypted. The decryption tool is free and safe, and we will provide you with it at the end of the post. Just do not rush utilising it, before … Continued

DynA-Crypt crypto-virus is a complicated and a quire unpredictable sample from the ransomware family. Recently, the latter variant took its first steps to starts its career as an awe-inspiring infection. DynA-Crypt cannot be described as any other ransomware infection would: it has some odd characteristics that are necessary to discuss. Let’s start with the features … Continued

It looks like someone really hates eBay because ransomware called eBayWall was detected last week. Cyber security expert Jakub Kroustek posted it on Twitter. eBayWall is not your average ransomware virus – it is quite strange and unusual. One of the strangest traits is that it does not ask for the ransom. Instead of that, … Continued

A file extension virus started spreading and it uses the name of Ebola, the horrible fever that has taken many lives. And it’s not the first ransomware infection to use it — we’ve already written about EbolaRnsmwr. These are malicious programs that lock the victim’s files and demand money for unlocking them. This Ebola ransomware … Continued

EduCrypt ransomware is a square peg in a round hole. This encrypting virus provides the victim’s with the decryption key. And, in fact, it cannot be referred to as a ransomware in its true sense, since it does not demand for any ransom. As it can be understood from its title, this ransomware virus wants … Continued

The malware Efji breaks files with the help of encryption, marks them with an “efji” file extension, then, asks for money in exchange for fixing them. It can be deleted, as can the other malware that came with it. But when your personal files being held for ransom by a malicious computer program under the control of a … Continued

Ehiz is a ransomware infection that attacks Windows computers. It spreads on pirating sites. It gets downloaded together with other malicious programs, such as adware and spyware. If Ehiz has infected your computer, you should see files that you can no longer open. The names of these files might end with “ehiz”. These are the … Continued

Eject is a new variant of Phobos ransomware. It attacks Windows PCs and servers, often those with vulnerable RDP credentials. Eject encrypts files on the infected computer. This is to force victims to pay a ransom to get the decryptor. In fact, the criminals behind Phobos and Eject are known scammers who may ask for multiple … Continued

If your files suddenly refuse to open and had their names changed to end with “ekvf”, that’s the work of the Ekvf ransomware. It can be devastating: Ekvf breaks files (possibly irreversibly) and it installs additional malware. To recover, you need to delete all infections, secure your login credentials for online accounts, and that doesn’t … Continued

Embrace ransomware is a lethal computer virus that could result in very severe consequences. It was purposely developed by cyber criminals with the main goal – to infect computers, hijack files by encrypting them and then ask for a ransom in order to decrypt them. In this article, you will find all main information about … Continued

Empty ransomware virus comes into the category of malware as an evident variant of CryptoMix family. Just on 22nd of August, we investigated a sample of Error which also has earned the right to be assigned to the latter string of infections. These are not the only three members of this line of ransomware: Azer … Continued

enc_robbinhood is ransomware, a virus that basically destroys files on a computer and then asks for money in exchange for restoring them. The files are tricky to recover on your own, and the infection reveals how vulnerable a computer and its user is. The encrypted files are renamed into something like this: Encrypted_[random caharcters].enc_robbinhood And … Continued

Just last week we first heard of a name “Encryptile” which refers to a new ransomware virus. We no longer get startled by the number of crypto-nightmares that get released of their leashes. It is vital to keep a straight head and think of the most rational ways of obviating or defeating a ransomware. Due … Continued

Ender Ransomware is considered to me extremely dangerous ransomware infection. It can cause you detrimental damage and lock your files. If you are a victim of this virus, please continue reading this article. We will provide you with in-depth description about features of this virus as well as the way to recover your files and … Continued

Enfp is ransomware. It breaks your data and then demands that you pay hundreds of dollars to fix it. You can recognize Enfp by the new extension that it gives your files: “enfp”. In addition to encrypted files, a few other problems come with Enfp malware. Additional malicious programs might be installed that steal information … Continued

Enigma Ransomware was designed to infect primarily Windows OS, in fact, all versions of it. This ransomware aims at Russian speaking users. It was discovered by Jakub Kroustek, a reverse engineer and malware expert for AVG, in April this year. It is important to highlight that this ransomware is in no way related to any … Continued