New Ransomware Replicates Itself


A new form of Ransomware is now capable to replicating itself.–PC Pitstop

New Ransomware Replicates Itself

By Stu Sjouwerman, for KnowBe4.com Security Awareness Training

Here is a powerful piece of ammo to get (more) IT Security budget.

SophosLabs labs’ blog reported of a new Ransomware strain with a difference – this one is a true self-replicating parasitic virus! They call it VirRansom.

This new strain is a hybrid that combines CryptoLocker / CryptoWall functionality with active self-replicating virus infections of all files it can find. And like the cybercrime Reveton family of malware, it locks the PC’s main screen demanding 0.619 Bitcoin to let you back in. Yikes.

Let me quote Sophos for a moment: “Worms vs. Parasitics: Most worms leave you with one, or perhaps a handful, of infected files that weren’t there before and need to be deleted.

“Parasitic viruses, in contrast, may leave you with hundreds of infected files on each computer, or thousands, or more. If you leave even one of those infected files behind after a clean-up, the infection will start up all over again.

“Worse still, the infected files can’t just be deleted, because they are your own files that were there before the infection started. That makes cleanup much trickier.”

The good news…article continued here.

Stop Responding to Threats.
Prevent Them.

Want to get monthly tips & tricks?

Subscribe to our newsletter to get cybersecurity tips & tricks and stay up to date with the constantly evolving world of cybersecurity.

Related Articles