Wednesday, June 11, 2008

Ransom-ware?

(H/t Lifehacker and the Washington Post)
A dangerous new strain of malicious software that holds the victim's computers files for ransom has been unleashed, and Kaspersky Lab is warning that security researchers have yet to crack the encryption key.

[snip]

Once a system is infected and the files are encrypted, it leaves the following message in a pop-up alert:
"Your files are encrypted with RSA-1024 algorithm.
To recovery your files you need to buy our decryptor.
To buy decrypting tool contact us at: ********@yahoo.com"
Okay, sounds like most of the victims are in Russia/Eastern Europe - so I wouldn't exactly press the panic button, yet.

But still, rather creative.

Provided that you made the fee reasonable and the method of payment easy - you might even get a few bucks. You just have to wonder how on earth this guy expects to get paid without leaving tracks.

No comments: