The Week in Ransomware - June 2nd 2017 - XData, Decryptors, and Junkware

[frogboy]

This has been a week of pure junk ransomware releases and decryptors. As most of these smaller ransomware variants never make it into actual distribution, I call this a win for the good guys. The big news this week is the release of the master decryption key for XData and an updated an updated decryptor for Amnesia2.

Contributors and those who provided new ransomware information and stories this week include: @BleepinComputer, @malwrhunterteam, @PolarToffee, @fwosar, @struppigel, @demonslay335, @DanielGallagher, @malwareforme, @jorntvdw, @FourOctets, @campuscodi, @JAMESWT_MHT, @Seifreed, @JakubKroustek, @emsisoft, @siri_urz, @malware_traffic, @Malwarebytes, @MarceloRivero, @kryptoslogic, @avast_antivirus, and @CERT_Polska_en

If you are interested in ransomware or infosec, I suggest you follow them on Twitter.

May 27th 2017
Dviide Ransomware Discovered
MalwareHunterTeam found a new ransomware called Dviide that appends the .dviide extension to encrypted files.

Full Article. The Week in Ransomware - June 2nd 2017 - XData, Decryptors, and Junkware

 

[Der.Reisende]

This has been a week of pure junk ransomware releases and decryptors. As most of these smaller ransomware variants never make it into actual distribution, I call this a win for the good guys. The big news this week is the release of the master decryption key for XData and an updated an updated decryptor for Amnesia2.

Contributors and those who provided new ransomware information and stories this week include: @BleepinComputer, @malwrhunterteam, @PolarToffee, @fwosar, @struppigel, @demonslay335, @DanielGallagher, @malwareforme, @jorntvdw, @FourOctets, @campuscodi, @JAMESWT_MHT, @Seifreed, @JakubKroustek, @emsisoft, @siri_urz, @malware_traffic, @Malwarebytes, @MarceloRivero, @kryptoslogic, @avast_antivirus, and @CERT_Polska_en

If you are interested in ransomware or infosec, I suggest you follow them on Twitter.

May 27th 2017
Dviide Ransomware Discovered
MalwareHunterTeam found a new ransomware called Dviide that appends the .dviide extension to encrypted files.

Full Article. The Week in Ransomware - June 2nd 2017 - XData, Decryptors, and Junkware

Resurrection-Ransomware Plays Music
BleepingComputer discovered a new HiddenTear based ransomware called Resurrection-Ransomware. This ransomware appends [rand].resurrection to encrypted files and creates ransom notes named Readme.html. The ransom note plays funky Halloween+Harry Potteresque music. It is decryptable.

How cool is that?
You can listen to the music, there's a YouTube link in the article.

Anyway, great share @frogboy, I very much enjoy those "The Week in Ransomware" writeups, they should find their way to MT News more often

 

[tryfon]

Resurrection-Ransomware Plays Music
BleepingComputer discovered a new HiddenTear based ransomware called Resurrection-Ransomware. This ransomware appends [rand].resurrection to encrypted files and creates ransom notes named Readme.html. The ransom note plays funky Halloween+Harry Potteresque music. It is decryptable.

How cool is that?
You can listen to the music, there's a YouTube link in the article.

This is pretty funny