Typically, this threat asks from $100 to $300, but the price can be increased any time soon.Īccording to the warning message, which is typically displayed by this threat, people have only a certain amount of time to pay a ransom and recover the connection to their files. To restore them, Cryptolocker ransomware asks you to pay a ransom via Moneypak, Ukash, cashU, or Bitcoin. CryptoLocker is the file-encrypting ransomware, so it uses RSA public-key cryptography to lock the following file types on victim's PC:ģfr, accdb, ai, arw, bay, cdr, cer, cr2, crt, crw, dbf, dcr, der, dng, doc, docm, docx, dwg, dxf, dxg, eps, erf, indd, jpe, jpg, kdc, mdb, mdf, mef, mrw, nef, nrw, odb, odm, odp, ods, odt, orf, p12, p7b, p7c, pdd, pef, pem, pfx, ppt, pptm, pptx, psd, pst, ptx, r3d, raf, raw, rtf, rw2, rwl, srf, srw, wb2, wpd, wps, xlk, xls, xlsb, xlsm, xlsx.Īs you can see, this list is full of widely used files names, such as doc, xls and similar. No matter that it belongs to the same category as FBI virus, Police Central e-crime Unit virus or Department of Justice virus, this virus tries to convince its victims that they have to pay a ransom by encrypting their personal files. Once the victim is tricked into opening it, the virus infiltrates the target PC system, encrypts victim's files and displays a ransom note which is displayed below.ĬryptoLocker demands ransom to be paid in Bitcoin or prepaid vouchers These messages typically contain malicious attachments which carry the payload of the ransomware. For that, malware relies on seemingly harmless email messages. The main goal of Cryptolocker is to infiltrate your computer without your knowledge. If you get a message that your files are encrypted by CryptoLocker, it is most likely other ransomware, such as TorrentLocker. Since then, many other versions of the virus emerged, but they are not related to the original one. This allowed users to retrieve their data without paying the ransom. The security firm gained access to the database used by hackers to store all decryption keys. CryptoLocker virus was discontinued on June 2nd, 2014, when Operation Tovar took down the Gameover Zeus botnet.
0 kommentar(er)
