A sophisticated ransomware program called MarsJoke threatens home users, educational institutions and government bodies in order to earn as many coins as possible Bitcoin Discreet and valuable
American security solutions company Proofpoint She reported This week in her blog about a new type of ransom program called MarsJoke, which is gaining momentum in the United States and aimed primarily at government bodies and educational institutions. According to the company, the team identified the software at the end of August, but last week began a massive campaign to distribute it via e-mail.
The mails that distribute MarsJoke look like they come from forwarding companies that invite the recipient to follow a package that supposedly makes its way to it. Proofpoint notes that the methods of distribution are very similar to those of the CryptFile2 ransom program of August, and that a bot program named Kelihos is responsible for them.
Paste encrypts the files and creates a number of Readme files, which instruct the user to pay a ransom within four days - otherwise the files will be deleted forever from the hard drive. The amount that the user is asked to pay is 0.7 bitcoins, ie 1,200 shekels. Proofpoint emphasizes that MarsJoke is not "just another ransomware", but a particularly sophisticated one that distributes itself efficiently. Despite this, Anton Ivanov, an analyst, tweeted today Let's go Kaspersky, because the company managed to crack the locking of its files. It promises to provide more updates soon.
We've broken MarsJoke encryption. Use RannohDecryptor to decrypt files for free.
Details soon :)
- Anton Ivanov (@antonivanovm) September 30, 2016
Although Increasing efforts To combat the phenomenon, the infidel software market is still having the greatest profit potential for delinquents Network. At Proofpoint, it is estimated to cost about $ 1 billion a year.