Malware News FrozrLock Ransomware Advertised on the Dark Web As "Great Security Tool"

[Solarquest]

A new Ransomware-as-a-Service has become available on the Dark Web, named FrozrLock, available for only $220, and advertised under the tagline of "great security tool that encrypts most of your files in several minutes."

Bleeping Computer received a tip about FrozrLock’s existence from security researcher David Montenegro, and with help from Avast security researcher Jakub Kroustek, we were later able to tie it to previous ransomware infections as early as April 16.

“First detections were from Russia, without making any conclusions about its origin,” Kroustek said in a private conversation. “[It was] spreading via JS downloaders named as Contract_432732593256.js,” he said.

At the time, the ransomware had no name, but we called it AutoDecrypt in the Weekly Ransomware round-up of that week, based on the name of its decrypter.

In the meantime, more details have surfaced. Below is the homepage of the FrozrLock RaaS in full.
....

 

[Winter Soldier]

Also interesting from an operational point of view, the way in which this ransomware as-a-service is being offered in the “market" .
Probably via a malware production service with a big gain sharing.

 

[virusblocker101]

FrozrLock... even its name is ransomware-ish sounding. Dunno how ppl would fall for that. Most of the time alot of this programs are made just to troll and they will make it obvious in its name. There are also fake ones to prank somebody