HYDRACRYPT is a file-encrypting ransomware, which will encrypt the personal documents found on victim’s computer using RSA-2048 key (AES CBC 256-bit encryption algorithm), appending the .hydracrypt_ID_[8 random characters] extension to encrypted files. HYDRACRYPT then displays a message which offers to decrypt the data if a payment of 1 BTC (around $400) ransom is made within 72 hours. If the … [Read more...]

If your iPhone or iPad (iOS) device is locked, and you are seeing a "ATTENTION! Your phone has been blocked up for safety reasons" notification from a law enforcement agency (FBI, Australian Federal Police, Metropolitan Police, U.S. Department of Justice) asking you to pay a fine via GreenDot MoneyPak, Ukash or Paysafecard code, then your iPhone or iPad has stumbled upon a malicious web … [Read more...]

If your pictures, videos and documents are encrypted with a .VVV extension, and you have the Howto_Restore_FILES.TXT, Howto_Restore_FILES.HTML and Howto_Restore_FILES.PNG documents on your desktop, then your computer has been infected with a new variant of the TeslaCrypt ransomware. TeslaCrypt is a file-encrypting ransomware, which will encrypt the personal documents found on victim’s computer … [Read more...]

CryptoWall 4.0 is a file-encrypting ransomware, which will encrypt the personal documents found on victim’s computer using RSA-2048 key (AES CBC 256-bit encryption algorithm). CryptoWall 4.0 then displays a message which offers to decrypt the data if a payment of $700 (1.79 Bitcoins) ransom is made within 96 hours. If the user does not pay within this time frame, the ransom doubles to $1400 or … [Read more...]

CryptoLocker is a file-encrypting ransomware, which will encrypt the personal documents found on victim’s computer using RSA-2048 key (AES CBC 256-bit encryption algorithm). CryptoLocker then displays a message which offers to decrypt the data if a payment of 2.2330749 BTC (around 499 USD) is made within 96 hours, otherwise the data will be destroyed. CryptoLocker will add the .7z.encrypted … [Read more...]

Mynetcop.net is a malicious domain which locks Internet Explorer, Firefox and Google Chrome, then asks their owners to pay fines for allegedly violating several laws through their online activity. Mynetcop.net is basically just  a web page containing a malicious javascript that does not allow you to close the browser window or switch to a different web page. The Mynetcop.net virus will display … [Read more...]

Police-save.second-shine.com is a malicious domain which locks Internet Explorer, Firefox and Google Chrome, then asks their owners to pay fines for allegedly violating several laws through their online activity. Police-save.second-shine.com is basically just  a web page containing a malicious javascript that does not allow you to close the browser window or switch to a different web page. The … [Read more...]

Police-save.empirehydrogen.org is a malicious domain which locks Internet Explorer, Firefox and Google Chrome, then asks their owners to pay fines for allegedly violating several laws through their online activity. Police-save.empirehydrogen.org is basically just  a web page containing a malicious javascript that does not allow you to close the browser window or switch to a different web … [Read more...]