Threat Database Ransomware 'NSA Internet Surveillance Program' Ransomware

'NSA Internet Surveillance Program' Ransomware

By Domesticus in Ransomware

'NSA Internet Surveillance Program' Ransomware Image

The 'NSA Internet Surveillance Program' Ransomware infection blocks all access to the victim's computer, preventing the computer user from using their computer. The purpose of the 'NSA Internet Surveillance Program' Ransomware Trojan is to extract a ransom from the computer user. The 'NSA Internet Surveillance Program' Ransomware does this by taking the infected computer hostage and then threatening the victim with a ransom message. Like other Police Ransomware Trojans, the 'NSA Internet Surveillance Program' Ransomware claims that the infected computer was involved in illegal activities and then alleges that the affected computer was blocked by a law enforcement agency, in this case the NSA. It is important to remember that the 'NSA Internet Surveillance Program' Ransomware has no real association with law enforcement and is actually part of a well known scam.

The 'NSA Internet Surveillance Program' Ransomware Accuses You of No Commited Crimes

There are countless variants of the scam perpetrated by 'NSA Internet Surveillance Program' Ransomware. Among those variants are the 'Comandancia General de Policía' Ransomware, the 'Dansk Rigspolitiet' Ransomware, the 'Police Judiciaire Fédérale' Ransomware, and many more. All of these are designed to scare computer users, using a threatening message that claims that the infected computer was used to view illegal pornographic material, distribute malware and other illegal activities. The 'NSA Internet Surveillance Program' Ransomware then lists the penalties for these kinds of infractions, including years of jail time and enormous fines of thousands of dollars. The 'NSA Internet Surveillance Program' Ransomware message goes on to say that the computer user should pay a fake police 'fine' through MoneyPak or other electronic payment services.

Terminating the 'NSA Internet Surveillance Program' Ransomware for Good

There are several ways in which the 'NSA Internet Surveillance Program' Ransomware infects a computer. Often, the 'NSA Internet Surveillance Program' Ransomware will enter a computer after the victim's computer was exposed to an attack website. These types of websites use exploit kits to install malware on visitors' computers. Computer users are directed to these websites in a variety of ways. These include malicious redirect scripts inserted into a compromised website, malicious embedded links distributed through email or social media or through malicious advertisements contained in unsafe websites. Since these kinds of exploit kits take advantage of outdated software in the infected computer, one of the best ways to protect yourself from 'NSA Internet Surveillance Program' Ransomware and other malware is to keep your software fully up to date. A reliable anti-malware scanner should also be used to protect your computer when browsing the Web.

File System Details

'NSA Internet Surveillance Program' Ransomware may create the following file(s):
# File Name Detections
1. C:\ProgramData\[RANDOM CHARACTERS].plz
2. C:\ProgramData\[RANDOM CHARACTERS].ctrl
3. C:\ProgramData\[RANDOM CHARACTERS].pff

Registry Details

'NSA Internet Surveillance Program' Ransomware may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Winmgmt\Parameters\ServiceDll = "C:\PROGRA~2\6j108owj.plz"

Trending

Most Viewed

Loading...