Threat Database Ransomware VinDizelPux Ransomware

VinDizelPux Ransomware

By GoldSparrow in Ransomware

A brand-new data-encrypting Trojan has come to the attention of cybersecurity analysts. The name of this new file-locker is VinDizelPux Ransomware. This Trojan belongs to the MedusaLocker Ransomware family.

Propagation and Encryption

Malware researchers have not yet identified the specific infection vector involved in the distribution of the VinDizelPux Ransomware. Experts speculate that the VinDizelPux Ransomware is likely being spread via mass spam emails, corrupted advertisements, fake social media pages, torrent trackers, fraudulent application updates and downloads, pirated copies of popular software suites, etc. Upon infecting a computer, the VinDizelPux Ransomware scans the files present on the compromised host. The VinDizelPux Ransomware is programmed to target documents, images, videos, audio files, presentations, databases, spreadsheets, archives and many other filetypes. This will result in most of your files being locked via a secure encryption algorithm. When the VinDizelPux Ransomware encrypts a file, it adds a '. VinDizelPux' extension to its name. This will result in a file that was named 'white-kettle.jpeg' originally be renamed to 'white-kettle.jpeg.VinDizelPux.'

The Ransom Note

Next, the VinDizelPux Ransomware will make sure to drop a ransom note on the infected PC. The file, which contains the message of the authors of the VinDizelPux Ransomware, is named 'Recovery_instructions.html.' In the ransom message, the attackers state that they demand to be paid 1BTC (approximately $9,300 at the moment of typing this post) in exchange for the decryption key the user needs to recover their data. They are willing to decrypt up to three files for free, as long as they do not contain any important information. The attackers provide the user with a link to a Tor-based website, where the victim can pay the ransom fee. There are a couple of addresses provided as a means of communicating with the attackers – ‘dec_helper@outlook.com' and ‘dec_helper@excic.com.' The attackers warn that users who do not contact them within three days will have to pay an increased ransom fee.

It is not a supported idea to get in touch with conmen like the shady individuals behind the VinDizelPux Ransomware. Instead of paying them the hefty ransom fee, you should consider investing in a legitimate, up-to-date anti-virus suite, which will help you remove the VinDizelPux Ransomware from your system.

Trending

Most Viewed

Loading...