Malware News New Stampado Ransomware Advertised on the Dark Web

[Exterminator]

Crooks are advertising a new breed of ransomware on the Dark Web, calling it Stampado and selling it for only a fraction of the price of other ransomware variants, namely a meager $39 for a lifetime license.

While most ransomware families cost hundreds of dollars to rent each month, Stampado decided to open the gates of hell and unleash cheap ransomware on the market, with a slew of features that allow subsequent crooks to focus on distribution and leave malware coding to the Stampado crew.

According to Heimdal Security, the cyber-security vendor that spotted Stampado's ad, the ransomware has the same features, at least on paper, that are also found in the infamous and still-undecrypted CryptoLocker ransomware.

Stampado available as a RaaS offering
Crooks are offering Stampado via a Ransomware-as-a-Service (RaaS) model that has become very popular among cyber-criminals. This means that a buyer would receive a builder or get access to a control panel where they could create their custom ransomware file and then embed it in other documents to distribute as spam, adware, or fake installers.

Stampado's authors say that they can provide ransomware payloads in formats such as EXE, BAT, DLL, SCR, and CMD.

Along with the Dark Web advertisement, the crooks also recorded a video to guide potential buyers through the infection process. This video provided some clues of how Stampado works.

The ransomware locks files with the ".locked" file extension, also used by other ransomware families, and comes with a very well worded ransom note that includes all the details to pay the ransom.

No Stampado infections detected until now
The ransom fee is probably customizable based on each buyer's preference, along with a grace period, which in the video appears to be 96 hours.

After that, Stampado will delete a random file from the infected computer every six hours. This behavior is similar to the Jigsaw ransomware, which also deletes user files to scare the victim into paying the ransom.

No Stampado samples were detected in the wild at the time of writing, so neither Heimdal Security nor other experts Softpedia contacted can tell if the ransomware could be decrypted.

 

[DardiM]

Thanks for the share
$39 for a lifetime license

The link given as Source doesn't open in none of my browsers !?
HTTP OK (200), but only a very small .gif received :
1x1 : 0.04 ko

 

[boredog]

DardiM

here is heidmals posting on this new ransomware..

Security Alert: New and Cheap Stampado Ransomware for Sale on the Dark Web - Heimdal Security Blog

 

[DardiM]

DardiM

here is heidmals posting on this new ransomware..

Security Alert: New and Cheap Stampado Ransomware for Sale on the Dark Web - Heimdal Security Blog

Thanks you but I was talking about the "source" link at the top of the thread.
I wonder if I am the only one that can't reach it.

 

[StriderHunterX]

Dark Web?

Shall I bust out the "de-facto browser" of choice to surf those turbulent waters? This is scary stuff,indeed.
A measly $39 bucks for a disruptive weapon of this scope? Although,someone could start reverse-engineering on it....

The race begins.

 

[boredog]

ah ok I see wut u r talking about but I have no problem going to that site.
http://news.softpedia.com/news/new-stampado-ransomware-advertised-on-the-dark-web-for-only-39-506272.shtml

 

[Zerion]

Thanks for the share op, scary things tho.. Extremely cheap aswell so im guessing alot of ppl will be using this :O

 

[boredog]

as far as I know you can not access the dark web with a normal browser. you need something like tor plus its addon browser. and a good vpn. and you have to like onions

 

[Zerion]

as far as I know you can not access the dark web with a normal browser. you need something like tor plus its addon browser. and a good vpn. and you have to like onions

Tor is enough, but a good VPN is to advise, and a nice antivirus / antimalware setup as there are some fishy ppl there.. sick what you can actually do there.. order a hit, weapons, drugs, whatever.. the sites are .onion

 

[boredog]

well I don't need weapons. have enough of those. don't need drugs, don't need to order a hit but I could use a good woman that can cook.
maybe a mail order bride? she doesn't even need to send pic of truck or boat cause I have those too.
I do us quietzone that comes with tor and their version of firefox but they don't update it at all and so when my sub is up in oct I might go another route since they seem to have no support anymore on wilders.

 

[StriderHunterX]

as far as I know you can not access the dark web with a normal browser. you need something like tor plus its addon browser

That's what I meant with the "de-facto browser" of choice...

 

[_CyberGhosT_]

Question is, should we be linking to that kind of thing here ?
What ? it's a common sense question
::EDIT::
I am now banished to the corner, I realize the link
is only to the story. I haven't had my coffee, ignore me.

 

[jamescv7]

Well no matter if the selling price of ransomware kit is cheap or expensive, still deadly and typical user will just pay for it.

So always think before you click.