A new ransomware that asks for cryptocurrencies is in town. It’s called CryCrypto, and it’s getting popular due to the attention that it gets from crypto publication websites. The unique thing about CryCrypto is that it’s targeting only Canadians, and it mimics a government website that offers the COVID-19 tracking app.
When the victim falls for the trick and installs the offered app, CryCrypto ransomware will encrypt all files in the victim’s device, and it will tell the victim to open a readme file. Inside the readme file, there’s an email address. Apparently, the instruction to send the cryptocurrencies would be provided through that email address.
This particular ransomware is not closed source. In fact, it was created by an open-source project that is shared publicly on GitHub. However, the crypto analysts in ESET (a popular antivirus program) claimed that this open-source project on GitHub has zero purposes except to be used for malicious purposes.
ESET also built a decryption app for Android to help CryCrypto victims. That being said, ESET claimed their app only works with the latest Android version and not with older devices.
CryCrypto is the latest ransomware that has become popular. Recently, most ransomware always asks for cryptocurrencies in exchange for file decryption tools.
Source: CoinTelegraph
