JIGSAW RANSOMWARE

ImageSource
JIGSAW RANSOMWARE This ransomware was first spotted in April 2016. A notorious virus that disables the computer and encrypts the files on it and threatens to delete them, is actually the first one that carries out this threat.

Once the virus invades the system a countdown timer starts and if the demanded ransom of $150 is not paid within first hour it deletes one file and continues deleting as the timer resets every 60 minutes deleting more and more files.

JIGSAW virus encrypts files using AES-128-CBC and creates a secret decryption key, which is needed to decrypt all these encrypted files.

Jigsaw malware creates a number of problems:-
  • Jigsaw drops other type of infections in order to invade your system deeply.
  • Spam files and registries are injected on to your device.
  • A lot of pop-up ads come out on the screen.
  • Slows down system’s performance.

Comments

Post a Comment

Popular posts from this blog

SATANA RANSOMWARE

Image
SATANA Trojan encrypts files and corrupts windows Master Boot Record (MBR) thus blocking the Windows boot process. SATANA behaves quite similarly like the notorious PetyaRansomware . Image Source To encrypt PC files, PETYA relies on the help of a tagalong Trojan called Mischa, while SATANA manages tasks on its own. Once the ransomware start running it disappears, and hides under a different name in the %TEMP% folder. Then after it will always prompt the user to download a malicious file until they click yes. Once the action starts, the malicious code will be written to the beginning of disk. After it installs and runs its malicious code, SATANA then waits for the computer to reboot. But the system won’t start instead it will show a screen with the ransom note, like most ransomware.
Read more

WANNACRY RANSOMWARE

Image
ImageSource WannaCry One of the most prolific attacks ! WannaCry is an ongoing ransomware cyber attack, that holds your computer hostage until the  demanded ransom is paid. This Crypto Worm started its attack on 2017 May 12, and was reported to infect more than 2,30,000  PC in more than 150 countries. The malware attacks vulnerable operating systems running older v ersions of windows. Hackers used cyber tools stolen from the US National Security Agency to strike the attack. WannaCry encrypts and scrambles all the data in the infected computer, then the malware pops up with a screen displaying the ransom note and demanding fee payable in **Crypto Currency (BitCoins). The malware has now evolved into a new worm EternalRock, which does not have the “kill switch” like that of WannaCry.
Read more