• Cyber Security
    • Ransomware Prevention
    • Ransomware Removal
    • Ransomware File Recovery
    • Ransomware Types
  • Ransomware Services
    • Ransomware Removal
    • Ransomware File Recovery
  • News
  • Tutorials
  • Ransomware TV

Ransomware Operators are Exploiting Syrian Tragedy

April 20, 2018Simeon Georgiev

Ransomware tactics are also evolving constantly and one can witness it with a new strain on the web with the name RansSIRIA, which locks down your files and ‘pleas’ for the ransom payment. The perpetrators of these ransomware attacks are claiming that they donate ransom money to Syrian refugees.

The security team, who discovered RansSIRIA, has declared it as a new variant of WannaPeace ransomware that specifically targets Brazilian users. As soon as the payload of this ransomware is transferred on the device, a forged MS Word window starts to appear until the encryption activity ends.

As soon as all the files are locked down, a ransom window in Portuguese starts to appear on the screen. The ransom note very poignantly reminds the affected users of a human tragedy Syrians are enduring. The ransom note then, in a manner of request, asks the users to pay money to restore their ransomware files and to restore the dignity of all those war-torn Syrian refugees.

To manipulate the affected users psychologically, the ransomware also shows horrific pictures and a video of the Syrian war, and how it is affecting children. Like any other ransomware operator, RansSIRIA’s developers are also demanding ransom or ‘donations’ in cryptocurrency.

There is no doubt that Syrians are going through a living hell and no one can even claim to identify with their plight. Unfortunately, some callous souls, like the operators of RansSIRIA are trying to benefit from their tragedy. They are not going to donate ransom payments to Syrian refugees. It’s just another ploy to trick the affected users to pay them instead of employing professional services to restore ransomware files.

The researchers are suggesting that this ransomware strain is still in its budding phase and the perpetrators haven’t commenced a mass attack so far. The Google statistics also show that RansSIRIA is just a month old strain.

We strongly advise our readers to refrain from paying any money to the attackers out of guilt or conscience because they are not doing it for charity. Like any other cryptovirological activity, they are demanding extortion money to restore ransomware files.

Simeon Georgiev
https://www.linkedin.com/in/simeon--georgiev/
I am a Cyber Security Enthusiast from Bulgaria. I like to write about malware and ransomware and global cyber attacks. You can reach me on Twitter @sgeorgiev1995 or Email: [email protected]
Previous post A Modified XiaoBa Code: Still Dangerous for User Data Next post A Local Town in Maine Sustains and Recovers From Ransomware Attack

Related Articles

NonPetya Ransomware Caused Millions of Dollars Worth of Damage to Maersk

January 27, 2018Simeon Georgiev
NonPetya Ransomware Caused Millions of Dollars Worth of Damage to Maersk

Ransomware: 4 Types of the Latest Trend in Cybercrimes

February 1, 2018Simeon Georgiev
Ransomware: 4 Types of the Latest Trend in Cybercrimes

NonPetya Ransomware Caused Millions of Dollars Worth of Damage to Maersk

February 1, 2018Simeon Georgiev
NonPetya Ransomware Caused Millions of Dollars Worth of Damage to Maersk

Latest on Ransomware TV

https://vimeo.com/399908876?loop=0

Recent Posts

  • How to protect your organization against ransomware reinfections
  • AuKill Helps Ransomware Operators Disable EDR and Security Tools
  • AI-ransomware is a real threat, just not a realistic one yet
  • Rorschach is the new speed king in the ransomware space
  • The Role of Supply Chain Breaches in Ransomware Attacks

Stay Protected

Subscribe to our mailing list to get the latest cyber security and ransomware removal articles!

Thank you for subscribing.

Something went wrong.

Navigation

  • Cyber Security
    • Ransomware File Recovery
    • Ransomware Prevention
    • Ransomware Removal
    • Ransomware Types
  • News
  • Tutorials

Ransomware Attacks (Last 6M)

0

Connect & Protect

Facebook
Google+
LinkedIn
YouTube
Vimeo

More

  • BECOME A CONTRIBUTOR

MonsterCloud Reviews

© 2020 MonsterCloud.com. All Rights Reserved.