Threat Database Ransomware PRISM 'Your Computer Has Been Locked!' Ransomware

PRISM 'Your Computer Has Been Locked!' Ransomware

By ESGI Advisor in Ransomware

Threat Scorecard

Ranking: 9,455
Threat Level: 20 % (Normal)
Infected Computers: 751
First Seen: August 12, 2013
Last Seen: September 16, 2023
OS(es) Affected: Windows

PRISM 'Your Computer Has Been Locked!' Ransomware Image

A new ransomware, the PRISM 'Your Computer has been locked!' Ransomware has been preventing computer users from using their machine, displaying a threatening message demanding the payment of a ransom. The PRISM 'Your Computer has been locked!' Ransomware Trojan displays a fake message from the NSA which accuses the victim of downloading and distributing illegal content, such as pirated software or illegal pornographic material. The PRISM 'Your Computer has been locked!' Ransomware Trojan locks the infected computer's screen, demanding that the computer user pay a fake police fine of $300 through MoneyPak in order to unlock it. It is important to remember that the PRISM 'Your Computer has been locked!' Ransomware is not actually associated with the American police authorities.

The PRISM 'Your Computer has been locked!' Ransomware is Another Variant of the Police Trojan

This is a common online scam that is similar to countless variations of the Police ransomware attack. It's meant to scare inexperienced computer users by accusing them of breaking the law. Rather than paying the PRISM 'Your Computer has been locked!' Ransomware's fine, it is important to remove this threat immediately with a reliable anti-malware application. The PRISM 'Your Computer has been locked!' Ransomware blocks all access to the victim's computer, preventing all access to the infected computer's operating system and files.

How the PRISM 'Your Computer has been locked!' Ransomware Attacks a PC

Most PRISM 'Your Computer has been locked!' Ransomware infections enter a computer using typical malware delivery methods. The PRISM 'Your Computer has been locked!' Ransomware can infect a computer after the victim visits an attack website that uses an exploit kit to install malware on the visitors' computers. Computer users may be directed to attack websites after clicking on a malicious embedded link in an unsolicited email message, after visiting a compromised website containing a malicious redirect script or through a variety of other scams. Exploit kits associated with the PRISM 'Your Computer has been locked!' Ransomware will take advantage of outdated software on the victim's computer in order to install malicious software, so an important part of protecting your computer from malware is ensuring that all of your software is fully up to date.Screenshot

File System Details

PRISM 'Your Computer Has Been Locked!' Ransomware may create the following file(s):
# File Name Detections
1. C:\ProgramData\[RANDOM CHARACTERS].plz
2. C:\ProgramData\[RANDOM CHARACTERS].ctrl
3. C:\ProgramData\[RANDOM CHARACTERS].pff

Registry Details

PRISM 'Your Computer Has Been Locked!' Ransomware may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Winmgmt\Parameters\ServiceDll = "C:\PROGRA~2\6j108owj.plz"

URLs

PRISM 'Your Computer Has Been Locked!' Ransomware may call the following URLs:

mybestdc.com

Messages

The following messages associated with PRISM 'Your Computer Has Been Locked!' Ransomware were found:

NSA Internet Surveillance Program
PRISM
Computer Crime Prosecution Section
Your Computer has been locked!
Your computer has been locked due to suspicions of illegal content downloading and distribution.
Your case can be classified as occasional/unmotivated, according to 17 (U.S Code)
Thus it may be closed without prosecution.
Your computer will be unblocked automatically.
In order to resolve the situation in an above-mentioned way you should pay a fine of $300 (MoneyPak)

Trending

Most Viewed

Loading...