Application security

New blackmail virus spread across Russia, could reach West

Share

Security experts warned of a new variation of a virus that encrypts files and then blackmails the user into parting with money in return for a password.

The variant, classified as Win32.GpCode.ae., is currently spreading across the Russia. Once downloaded, the virus encrypts data on the victim’s PC and is only decrypted by the virus writer once demands for money are met.

This virus differs from earlier variants in that it encrypts the user’s data using RSA 260-bit, a more secure encryption algorithm than RSA 67-bit, as previously used.

The body of the email reads:

Some files are coded by RSA method.
To buy decoder mail: [email protected]
with subject: REPLY

Experts said the virus could spread out from eastern Europe and hit the west very soon.

“This is the latest in a series of GpCode variants and we’re seeing growth in this type of cyber blackmail,” said David Emm, senior technology consultant, Kaspersky Lab.

“The virus has so far been confined to Russia. However, since we have seen isolated incidents of ‘ransomware’ in the U.K., users should be on their guard against this potential threat.”

An In-Depth Guide to Application Security

Get essential knowledge and practical strategies to fortify your applications.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.