- Jan 24, 2011
- 9,377
Jigsaw deletes 1,000 files every time you reboot your PC
A new ransomware variant called Jigsaw has come to light today, and it threatens and then deletes the user's files if the ransom note is not paid in due time, or when the victim reboots their computer.
The way this ransomware reaches infected computers is currently unknown. What is known is that once the ransomware's payload is launched into execution, it will target 226 different file types, encrypting their content with an AES algorithm and appending the .fun extension at the end of each file name.
Jigsaw ransomware uses the .fun file extension
Once this operation finishes, the ransom note is displayed on the user's screen, showing the infamous Jigsaw character from the Saw movie series, hence the ransomware's name.
The ransomware asks for 0.4 Bitcoin (~$160) as payment, but there's a catch. To force the user's hand into paying the ransom as quickly as possible, the Jigsaw ransomware threatens to delete some of their files every hour.
The bad part is that the ransomware lives up to its word and actually starts deleting more and more files as the user waits. Even worse, @MalwareHunterTeam discovered that with every PC reboot, the ransomware also deletes an additional 1,000 files.
Read more: Jigsaw Ransomware Threatens to Delete Your Files, Free Decrypter Available
A new ransomware variant called Jigsaw has come to light today, and it threatens and then deletes the user's files if the ransom note is not paid in due time, or when the victim reboots their computer.
The way this ransomware reaches infected computers is currently unknown. What is known is that once the ransomware's payload is launched into execution, it will target 226 different file types, encrypting their content with an AES algorithm and appending the .fun extension at the end of each file name.
Jigsaw ransomware uses the .fun file extension
Once this operation finishes, the ransom note is displayed on the user's screen, showing the infamous Jigsaw character from the Saw movie series, hence the ransomware's name.
The ransomware asks for 0.4 Bitcoin (~$160) as payment, but there's a catch. To force the user's hand into paying the ransom as quickly as possible, the Jigsaw ransomware threatens to delete some of their files every hour.
The bad part is that the ransomware lives up to its word and actually starts deleting more and more files as the user waits. Even worse, @MalwareHunterTeam discovered that with every PC reboot, the ransomware also deletes an additional 1,000 files.
Read more: Jigsaw Ransomware Threatens to Delete Your Files, Free Decrypter Available