Devious decryption scam rides ransomware Trojan Options

[Terryala]

Devious decryption scam rides ransomware Trojan

We can remember it for you wholesale

By John Leyden

Posted in Spyware, 3rd November 2009 09:50 GMT

Devious virus writers have come up with a new twist on ransomware-style malware.

A new strain of Trojan encrypts recently-opened files on compromised Windows PCs. But instead of demanding a ransom for a decryption key to unlock files, the malware relies on users to search the web for a possible way-out.

Hackers have cleverly baited searches for likely terms, with links to sites offering a supposed fix actually developed by the crooks behind the ruse.

A fuller explanation of the scam can be found Symantec's write-up on the Ramvicrype Trojan here and in a blog posting by Symantec researcher Shunichi Imano here. ®

http://www.theregister.co.uk/2009/11/03/ransomware_ruse/