Koolova Ransomware Directs Victims for Learning on Security

Lawrence Abrams from Bleeping Computer reports that Michael Gillespie who's a "ransomware hunter" has discovered the highly dangerous Koolova ransomware in a new variant which can encrypt all files as well as delete them from the target computer.

This fresh variant may be an extremely strange one. For, when downloaded it functions
same as Jigsaw another family of ransomware that loads text in full onto the end-user's computer-screen.

Thereafter, curiously, the malware asserts that the decryption code would become
available to the victim but only after reading 2 security articles: the first by the security team of Google regarding the way for remaining safe while working through the Net, and the second by Bleeping Computer giving a thorough information on the Jigsaw sample.

The strange thing about the latest Koolova ransomware is that it doesn't demand ransom amounts for giving the decryption key for unlocking encrypted files like it's normally with any earlier ransomware instead it tells the victim to learn. It leads the victim onto one article by Google Security Blog titled "Stay Safe While Browsing" along with another post by Bleeping Computer the online community website regarding one more malicious piece of ransom software called Jigsaw.

No sooner does the victim glances through the articles he finds a "Decrypt My Files" button on his screen. Hitting on that button would produce the decryption key from Koolova to unlock the machine's files. Express.co.uk posted this, January 5, 2017.

Meanwhile, the Koolova sample isn't really ready for getting used yet. It isn't clear what the ultimate objective is of the ransomware creators with their latest version. However, when it'll indeed become operable there's a possibility it'll have an extra element for yielding revenues to black-hat hackers.

Another unusual ransomware is Popcorn Time, which researchers found in December 2015. This one is created for providing one free decryption code for anybody ready for dispatching one malevolent web-link to contaminate 2 of his acquaintances.

Within its predictions report for 2017, the security company asserts that the latest ransomware's increase will be voluminous when cyber-criminals will seek more-and-more towards generating greater revenues through activities of Business E-mail Compromise scams.

» SPAMfighter News - 1/11/2017