ALERT: Exotic Ransomware
New ransomware strain released by “EvilTwin” or “Exotic Squad” was discovered in early October.
Although the ransomware looks like all the other ransomware on the surface, in looking deeper, it could prove VERY annoying in the future.
The Exotic Ransomware will encrypt all files, just like other ransomware. What it does differently than other ransomware, is that it also ecrypts executables in targeted folders on a victim’s computer, which makes the programs unusable. Then it will hit the Desktop twice, making it appear although it was continuously monitoring for new files.
The encrypted files will then look similar to the ones below, when you go to look for them:
The ransomware will then download a background image for the lockscreen & display the lock screen similar to below:
When the timer reaches 0, Exotic will shutdown the computer.
The ransomware appears to be in the development state, with 3 variants released over 3 days. The latest contains the Jigsaw Ransomware-like screenlocker ransom note that demands $50 USD to decrypt the files.
You shouldn’t be seeing it too much yet. But you can bet it’s being geared up for widespread release soon!
Leave a Reply