Threat Database Ransomware Supern0va Ransomware

Supern0va Ransomware

By Domesticus in Ransomware

Threat Scorecard

Threat Level: 100 % (High)
Infected Computers: 39
First Seen: October 3, 2012
Last Seen: January 21, 2022
OS(es) Affected: Windows

Supern0va, also known as the Metropolitan Police ransomware infection, is a dangerous police ransomware Trojan that takes a computer hostage in exchange for ransom. However, Supern0va does this by claiming to be part of a police operation. Supern0va uses a threatening message that demands the payment of a hefty fine in exchange for the removal of this ransomware threat from the victim's computer. ESG security researchers strongly recommend against following the instructions that Supern0va's variants provide. Instead, this malware threat should be removed from the victim's computer as soon as possible. To regain access to the blocked computer, there is no need to pay Supern0va's ransom. Instead, the victim can use some of Windows own components to bypass Supern0va and gain access to security software installed on the infected computer.

The Supern0va scam is typical of most Metropolitan Police ransomware scams. These kinds of malware threats have several characteristics in common that allow computer users to identify them. These include the following:

  1. Supern0va blocks access to the infected computer. When the victim attempts to log into Windows, a full screen message from the British Metropolitan Police or from a police agency belonging to the local police force will block access to all components on the victim's computer.
  2. Supern0va will use a message filled with threatening language claiming that the victim's computer was involved in criminal activity. These supposed criminal activities range from viewing pornographic material to trafficking with child pornography or distributing illegally copied software.
  3. Supern0va's ransom message will demand that the victim pay an elevated amount using a money transfer service. The money transfer services listed will typically include Ukash, leading to many variants of Supern0va being commonly referred to as the 'Ukash Virus.'
  4. ESG security researchers strongly advise against paying Supern0va's ransom. It is proven that Supern0va's ransomware and other Metropolitan Police ransomware Trojans will typically not respond to payment, which means that even when the victim agrees with the payment of the ransom, the computer will still be blocked. Instead, you should use Safe Mode or an alternate boot source to gain access to your security software. If updated, most security software should have no trouble detecting and removing a Supern0va infection. To protect yourself from Supern0va infections, ESG malware analysts advise being careful when downloading unknown files.

Trending

Most Viewed

Loading...