Ransomware
AveMariaRAT Distributed in Phishing Campaign
Security researchers with FortiGuard Labs tracked a new phishing campaign that was distributing several strains of fileless malware, among which was also one called AveMariaRAT. The campaign spreading AveMariaRAT uses... Read more
GoodWill Ransomware Tries to Play at Robin Hood
GoodWill is a relatively new ransomware strain analyzed by security researchers with CloudSEK. What particularly sets GoodWill aside from the majority of other ransomware clones and bigger families is the ransom note... Read more
Black Blight Ransomware is More of a Joke Than a Threat
A new piece of malware has been spotted in the wild and given the name Black Blight ransomware. The word 'ransomware' in this case is not really deserved, as Black Blight is more of a scam and looks like a script... Read more
Uihj Ransomware
There seems to be at least a couple of new Djvu ransomware clones coming out every week. This week is no exception - the latest ransomware based on Djvu to join the growing family of clones is called the Uihj... Read more
Cheerscrypt Ransomware Attacks VMware ESXi Servers
Cheerscrypt is a strain of ransomware that was spotted targeting VMware ESXi servers and using the typical double extortion approach that has become almost customary in ransomware over the past years. Cheerscrypt... Read more
RedEngine Ransomware
A new strain of file-encrypting malware has been spotted by security researchers. The new malware belongs to the Chaos family of ransomware variants and has been named the RedEngine ransomware. RedEngine behaves a lot... Read more
R3tr0 Ransomware
R3tr0 ransomware is a newly discovered strain of file-encrypting malware. The R3tr0 ransomware belongs to the wider family of Dharma ransomware clones. When deployed on a target system, the ransomware behaves as... Read more
What is Moonshadow Ransomware?
A new strain of ransomware was recently spotted in the wild, named Moonshadow ransomware. The malware belongs to the VoidCrypt family of ransomware variants. Moonshadow encrypts popular file types, including most... Read more
How to Remove Craze Ransomware
Craze ransomware is the name of a newly discovered strain of file-encrypting malware. There are no indications that the ransomware belongs to any of the big ransomware families. Once it encrypts affected files, the... Read more
Ewdf Ransomware
A new ransomware variant has been spotted in the wild. The new malicious tool is called the Ewdf ransomware, named after the file extension it appends to encrypted files. Ewdf is the latest ransomware vatiant to join... Read more
Bydes Ransomware
Bydes ransomware is the name of a newly discovered strain of file-encrypting malware. The new ransomware does not seem to belong to any of the major ransomware families or at least doesn't show signs of it. As most... Read more
EAF Ransomware
The EAF ransomware is a new strain of malware that was recently spotted by researchers. The ransomware does not appear to belong to any specific family of ransomware, at least under initial observation. EAF would... Read more
Rryy Ransomware
Rryy ransomware is the latest clone of the infamous Djvu ransomware - probably the ransomware family with the most spinoffs and variants at this point. The ransomware will scramble most files on a system, leaving... Read more
What is FIXED Ransomware?
FIXED is the name of a new strain of ransomware, discovered only recently in the wild. The ransomware doesn't seem to belong to any particular family of ransomware variants. The ransomware encrypts most commonly used... Read more
Zfdv Ransomware
As expected, there is no shortage of new Djvu ransomware variants this week, just like the week before. The newest version of Djvu spotted in the wild is called the Zfdv ransomware, named after the extension it... Read more
Miami44 Ransomware
The Miami44 ransomware is a new strain of file-encrypting malware that belongs to the broader Chaos ransomware family. The Miami44 ransomware behaves as expected - it encrypts the majority of files on a target system,... Read more
LXXwXXXNQ Ransomware
LXXwXXXNQ is the name of a new strain of ransomware. The newly discovered ransomware shows no particular signs of belonging to any of the major ransomware families such as Chaos, Djvu or Phobos. The ransomware will... Read more
Nordteam Ransomware
Nordteam ransomware is a new ransomware variant that belongs to the wider family of Spora ransomware clones. The ransomware encrypts most media, document, database and archive file types, rendering the majority of... Read more