TeslaCrypt is a new ransomware targeted at video games players. It works really similar to all other major ransomware viruses – first of all secretly enters the computer, then encrypts files and asks for a specific ransom to decrypt the files. However, it’s a little bit different from other ransomwares. TeslaCrypt uses an encryption method called AES and is targeted specifically at gamers.
Ransomware like TorrentLocker or CTBLocker are targeted at various files, like videos, photos, documents, etc. while TeslaCrypt is looking to encrypt files related to other 40 different video games. This ransomware is looking to decrypt files belonging to RPG Maker, Call of Duty, Dragon Age, StarCraft, MineCraft, World of Warcraft, World of Tanks, or Steam programs.
Furthermore, most other ransomware ask users to pay a ransom with bitcoins – it’s the only option. Now here on TeslaCrypt it’s up to you – you can do it via bit coins payment system or PayPal cash cards. While Paypal is a way more popular option among regular internet users than bticoins, you should think twice – it costs about $1000 USD to pay a ransom via Paypal and only about $500 USD to perform this using bitcoins. That’s because it’s easier to track payments on Paypal, therefore it’s more dangerous for hackers.
Right now it’s not clear how TeslaCrypt is distributed. However it’s clear that once inside this application will scan all files on your computer and decrypt some of them.
After the encryption those extensions will be changed to .ecc extension. Moreover, this ransomware will delete all Shadow Volume Copies or even your restore points so you will be not able to make a system restore.
Then you will have a classic order of events – your desktop background will be changed to a ransomware message and a new note called ‘HELP_TO_DECRYPT_YOUR_FILES.txt’ will appear on your desktop. There you will find instructions how to decrypt your files. In order words, a tutorial, how to pay the ransom and work with the decrypter. Additionally, you will be provided with a testimonial of decryption to ensure you that if you pay the asked amount of money, your files will be unlocked.
As for now, there are no other ways to decrypt your files than to pay the ransom and purchase the decrypter. What you can do is to protect your computer from additional problems. It’s known that TeslaCrypt can infiltrate other viruses into your system, therefore you should keep a trustworthy anti-malware like SpyHunter or Malwarebytes installed and wait for the solution of problems related to TeslaCrypt ransomware.
Ransomware like TorrentLocker or CTBLocker are targeted at various files, like videos, photos, documents, etc. while TeslaCrypt is looking to encrypt files related to other 40 different video games. This ransomware is looking to decrypt files belonging to RPG Maker, Call of Duty, Dragon Age, StarCraft, MineCraft, World of Warcraft, World of Tanks, or Steam programs.
Furthermore, most other ransomware ask users to pay a ransom with bitcoins – it’s the only option. Now here on TeslaCrypt it’s up to you – you can do it via bit coins payment system or PayPal cash cards. While Paypal is a way more popular option among regular internet users than bticoins, you should think twice – it costs about $1000 USD to pay a ransom via Paypal and only about $500 USD to perform this using bitcoins. That’s because it’s easier to track payments on Paypal, therefore it’s more dangerous for hackers.
Right now it’s not clear how TeslaCrypt is distributed. However it’s clear that once inside this application will scan all files on your computer and decrypt some of them.
After the encryption those extensions will be changed to .ecc extension. Moreover, this ransomware will delete all Shadow Volume Copies or even your restore points so you will be not able to make a system restore.
Then you will have a classic order of events – your desktop background will be changed to a ransomware message and a new note called ‘HELP_TO_DECRYPT_YOUR_FILES.txt’ will appear on your desktop. There you will find instructions how to decrypt your files. In order words, a tutorial, how to pay the ransom and work with the decrypter. Additionally, you will be provided with a testimonial of decryption to ensure you that if you pay the asked amount of money, your files will be unlocked.
As for now, there are no other ways to decrypt your files than to pay the ransom and purchase the decrypter. What you can do is to protect your computer from additional problems. It’s known that TeslaCrypt can infiltrate other viruses into your system, therefore you should keep a trustworthy anti-malware like SpyHunter or Malwarebytes installed and wait for the solution of problems related to TeslaCrypt ransomware.
No comments:
Post a Comment