Kaspersky Lab, one of the world’s leading anti-virus companies that protects against viruses, Trojans, worms, spyware, hacker attacks and spam, has detected a new variant of a cyber blackmail virus. The variant, classified as Win32.GpCode.ae., is currently spreading across the Russian Internet. Once downloaded, the virus encrypts data on the victim’s PC and is only decrypted by the virus writer once demands for money are met.
This virus differs from earlier variants in that it encrypts the user’s data using RSA 260-bit, a more secure encryption algorithm than RSA 67-bit, as previously used.
The body of the email reads:
Some files are coded by RSA method.
To buy decoder mail: firstname.lastname@example.org
with subject: REPLY
David Emm, Senior Technology Consultant, Kaspersky Lab, comments:
“This is the latest in a series of GpCode variants and we’re seeing growth in this type of cyber blackmail. The virus has so far been confined to Russia. However, since we have seen isolated incidents of ‘ransomware’ in the UK, users should be on their guard against this potential threat.”