Free Tool Provides Ransomware Victims Files Back

In March this year, there ransomware which focused specifically at gamers and files from popular computer games and gaming platforms like Steam encrypted and iTunes. Initially it was thought that it was a variant of the Crypto Locker ransomware, but the ransomware was eventually named "Tesla Crypt."

Like other ransomware victims must pay a fee to recover their files. Researchers from network giant Cisco, however, have discovered a vulnerability in the applied encryption, which makes it possible for the victims to decrypt without paying their files. The ransomware pretends to use asymmetric RSA-2048 encryption to encrypt files, but actually makes use of symmetric AES encryption.

The researchers also created a decryption utility to decrypt files free of charge. For this the "master key" must still be on the system. This file, called key.dat is in the user's application data directory stores. Users must copy this file to the directory of the decryption tool, and then run the tool, after all files are automatically decrypted. Using the tool is at your own risk, warns Cisco. Users also are advised to first back up their data.

Fake Email Wehkamp Spreads Ransomware

Mail order company Wehkamp warns Internet users for an email that already goes around a few days and seems to come from the company, but in reality that is spreading ransomware encrypts files for ransom.According to the email, the recipient would have placed an order with Wehkamp.

It is the computer game Fifa 15 for the PlayStation 3. The message notes for more information on the order to the included zip annex which has an order number. The zip annex again contains an .exe file with an icon from Adobe that the malware appears to be. It is a variant of CTB Locker, which stands for Curve Tor Bitcoin. This ransomware resurfaced last year for the first time. Once users the .exe file to open the computer becomes infected and all kinds of files encrypted. Then users get some days to pay the ransom for decrypting the files.

The infected e-mails using the name of Wehkamp went last week all around, according to a warning from security researcher Mark Loman Twitter. Since then notify all kinds of Twitter users that they have the message received . Increasingly it appears to the so-called order of the computer. "There is indeed a phishing email around that does not come from us. You can best remove him immediately and not open!", says Wehkamp via Twitter.

New Ransomware Encrypts Computer Games And iTunes

Researchers have discovered a new form of ransomware that encrypts data from popular computer games like Call of Duty, Minecraft and World of Warcraft, as well as files from iTunes. It is a variant of the Crypto Locker ransomware via a recently patched flaw in Flash Player and a parent leak in IE spreads, let security bromine in a report to know.

For this, use the cyber criminals flash ad banners. An infected banner sends visitors to the website on which it is displayed automatically to another website, where it attempts to infect your computer through vulnerabilities in IE and Flash Player.Remarkably, the banner only users of Internet Explorer and Opera forward.

The attack is successful, the ransomware 185 will encrypt various file extensions. It also includes those stocks of computer games. Something unprecedented as bromine. The ransomware looks for specific games and gaming software directories like Steam, publishers, and development software. What is striking is that there are many "classics" stand between, like Diablo, Fallout 3, Half-Life 2 and WarCraft 3. Also, several online games targeted, including World of Warcraft, Day S, League of Legends and World of Tanks.

Evolution

"Encrypting these games shows an evolution in the crypto-ransomware which cyber criminals focus on niches," said the researchers. According bromine may be that young adults have no important files on their computers and store photos in the cloud. "But most certainly have a Steam account with some games and an iTunes account full of music."

"Even for adults these attacks can be frustrating, as they lose their games with the rest of their personal data." Remarkable about the games that are encrypted that these popular games, but not for games that currently top the list of most played and best-selling games. It is therefore possible that the ransomware maker games has chosen who he likes to play.