Cryptolocker malware has a copycat
Posted by: Timothy Weaver on 12/16/2013 05:14 PM
[
Comments
]
A "large-scale distribution" of the new so-called Locker malware began earlier this month. Similar to the Cryptolocker virus, it too copies and encrypts a victim's documents, adding a ".perfect" extension, and then deletes the original data. It's kind enough to also leave a "contact" file.
Security startup IntelCrawler contacted a crook listed in the contact file. They were informed that in order to unlock their computer, they needed to pony up $150, paid by Perfect Money or QIWI VISA Virtual Card number to receive the decryption key.
IntelCrawler's researchers are working on a universal antidote.
"We have found a decryption method and universal strings [keys] for decryption on any infected client," Andrey Komarov, IntelCrawler's chief exec said.
IntelCrawler's researchers are working on a universal antidote.
"We have found a decryption method and universal strings [keys] for decryption on any infected client," Andrey Komarov, IntelCrawler's chief exec said.
Comments