KENS@TUTA.IO is an encrypting application that ciphers the user’s data without permission to ask for ransom. Therefore, it is commonly known as ransomware. This particular ransomware belongs to the GlobeImposter ransomware family. Also, after encryption, the malware changes filenames by appending it with KENS@TUTA.IO extension. For example, if you have a file with the name “Test.jpg,” then … Read more
.google is a malware application that encrypts the data on the infected system and asks a ransom amount for the decryption tool. However, it is worth mentioning that this ransomware does not share any connection with Google LLC. It seems like the developer used this name to make it sound trustworthy. After encryption, it changes … Read more
Waldo is a type of malware application that comes under the category of ransomware. Such malicious applications encrypt the user’s data and ask the victim for ransom. Usually, after encryption, the ransomware changes the filename and the extension. But that is not the case with Waldo ransomware. Waldo ransomware changes the data in the file … Read more
Vhd is a malicious program that encrypts your data to retrieve money from you. This malware comes under the category of ransomware. Ransomware uses encrypting algorithm that requires a key to decrypt the data. The ransomware can make your files unusable and appends them with the “.vhd” extension. For example, if you have a file with the … Read more
C-VIR is ransomware that belongs to the Dharma ransomware family. Ransomware can encrypt all of your data and render it useless. You need to buy a decryption key to get back your data. C-VIR ransomware changes your file name in the following format: filename, victim’s ID, coronavirus@foxmail.com email address and appending with “.C-VIR” extension. For … Read more
R44s is a new malware that comes under the Ranion ransomware family. It encrypts the data on the infected system and demands a ransom amount for the decryption tool. The ransomware appends all the affected files with the extension “.r44s”. For example, if you have a file named “Test.jpg,” then after encryption, the ransomware renames it as “Test.jpg.r44s.” After completion … Read more
DECP is ransomware that belongs to the Matrix ransomware family. It can encrypt your data and ask for a ransom to decrypt it. After encryption, it changes the file name os the infected file. It adds the developer’s email id and an identification string into the name of each file. It further adds the extension “.DECP” to … Read more
ATKL is a ransomware software that belongs to the Matrix malware family. It operates by infecting a system and encrypting the data and asking for a ransom to decrypt the data. After encryption, the ransomware renames all files. It follows this pattern: cyber criminals’ email address, random character string, and the “.ATKL” extension For example, … Read more
Remk is the name of a malicious ransomware program. It belongs to the STOP/Djvu ransomware family. Malicious apps like this function by encrypting the user’s data. Developers later ask the users to pay a ransom price for purchasing the decryption tool. After encryption, all modified files are renamed by appending the filename with “.remk” extension. … Read more
Teslarvng is a type of malicious software that comes under the Ouroboros ransomware family. It is capable of encrypting your data, and then it demands a ransom amount to decrypt it. After encryption, it adds the email id de-crypt@foxmail.com in the file name, and appends the extension of the file to “Teslarvng.” For example, If … Read more