Therefore, you should never download software from unofficial sources or open files received from suspicious emails. These viruses are often distributed using third party software download sources (peer-to-peer networks, freeware download websites, free file hosting websites, etc.), malicious files attached to spam emails, fake software update tools, and trojans. The encryption algorithm (symmetric/asymmetric) and cost of decryption are the only major differences. As with Popcorn Time, other ransomware-type viruses also encrypt files and make ransom demands. There are dozens of ransomware-type viruses similar to Popcorn Time including Sage, GoldenEye, and *.osiris - these are just some examples from many. Screenshot of a message encouraging users to pay a ransom to decrypt their compromised data: The problem can only be resolved by restoring your files/system from a backup. There are currently no tools capable of restoring files encrypted by Popcorn Time. There is a high probability that you will be scammed. Therefore, these people should never be trusted - never attempt to contact them or pay any ransom. In addition, research reveals that cyber criminals often ignore victims, despite submitted payments. All payments are supposedly used to help refugees and impoverished people of this nation.īe aware, however, that these claims are false - Popcorn Time's developers are cyber criminals who simply aim to generate revenue. They claim that the reason why they make these ransom demands is hunger in Syria. The ransom demand message states that Popcorn Time's developers are students from Siria. If at least two of these other people pay the ransom, files are decrypted free of charge. Victims must promote this link to other users so that their computers are infected. Popcorn Time has one feature making it unusual amongst ransomware-type viruses: it allows victims to decrypt their files free of charge using an affiliate link provided. If the ransom is not paid within seven days, the key is permanently deleted and decryption becomes impossible. Therefore, victims are encouraged to pay a ransom of 1 Bitcoin (approximately $750) to receive it. The key is stored on a remote server owned by Popcorn Time's developers.
The messages inform victims of the encryption. filock" extension.įollowing successful encryption, Popcorn Time opens a pop-up window and creates an HTML file (" restore_your_files.html"), placing it on the desktop. During encryption, this ransomware appends the names of encrypted files with the ". Following infiltration, Popcorn Time encrypts various data stored on the infected computer. Popcorn Time is a ransomware-type virus discovered by security researcher MalwareHunterTeam.
0 kommentar(er)
