It is currently 18-12-2017 04:21

Extortionate FOR Stampado encrypts files already encrypted by other ransomware

Extortionate FOR Stampado encrypts files already encrypted by other ransomware

by sigismund » 2016-09-16 15:51:21


If Stampado will be redirected to the system where the files have already been encrypted extortionate, the victim have to pay twice.


The computer is infected extortionate IN itself unpleasant circumstance. Having lost access to their documents, the user feels powerless and overwhelmed and forced to pay the ransom. However, things can become even worse if the files are encrypted not one blackmailer, but two. In this case, the victim have to pay twice.

As a rule, intizarova system, the ransomware scans for the presence of files with certain extensions. This means that it does not touch files already encrypted by another extortionist (of course, if the malware does not encrypt the entire drive).

The researcher of the company Emsisoft Wosar Fabian (Fabian Wosar) found a new version AT an extortionate Stampado that can encrypt already encrypted files. In the list of extensions that the malware is looking for, once on the computer, the examiner found extension to add to files by other coders. That is, if Stampado will be redirected to the system where the files have already been encrypted BY rent-seeking, to recover the victim will have to pay double the ransom.

Judging by the sample source code Stampado, currently the malware is able to encrypt with more than 50 different extensions that add other Trojans-extortionists.

Extortionate FOR malicious software that blocks access to a computer or stored on the system files and demanding cash payment for his recovery.
sigismund
moderators
Сообщений: 788
Депозит: 0 BTC

Rating: 5