Security Researchers Raises Warning Against New Ransom Trojan

Recently, a new Trojan has been identified that attempts to scare by a series of messages that try to imitate Microsoft's activation procedure. According to the security vendor F- secure, a compromised system will witness a message that notifies readers that, the copy of Window is locked and they might become a prey to a scam or there might be some internal problem in the system.

The Trojan has been recognized as Trojan.Generic.KDV.153863. However, users are not requested directly make any sort of payments. Rather, the Trojan developers make money via a method called short stopping.

The Trojan pops an error message on the computer screen, which notifies users that the license of the Windows software is locked. This message appears on a blue screen, to present an impression that the message was dispatched from Microsoft.

As per the security firm F-secure, users who receive this message will not be able to turn on their computers in either normal or safe mode. Targeted users are requested to turn on the product so that they can continue running the installed version.

When innocent users click on the next button to go ahead with the activation process, they are directed to another window. The new message in the window notifies users that activation is not permitted via Internet or SMS. Users need to call on any of the various contact numbers given in the message to get the installation code.

Commenting on the statement, Mikko Hypponen, Chief Research Officer at F- secure stated that, ransomware creators emerge with a novel payment technique every time one is closed down, as reported by COMPUTER WORLD on April 11, 2011. He further stated that, extortion software, like GPCode and the latest Trojan are not just quickly surging, but also present an apparent harm to the users.

Hypponen further commented that, much of the harm caused by malware is momentary for the end users. He stated that, if the system has been compromised by a bot Trojan, the machine might circulate plenty of spam, but if anything, that becomes sluggish the system only a bit. Even keyloaders, if they compromise the credit card, people don't really lose money as they can receive it back. Conclusively, he stated that ransomware is a bad news, as either the system becomes completely damaged or all the files stored on the system gets encrypted.

Related article: Securities Push Up A Must For Web Companies

» SPAMfighter News - 4/21/2011