Malware Hunter Team has discovered a new ransomware called RansSIRIA which infects and encrypts computer files and states that it will donate ransom payments to Syrian refugees. Security experts say that the said ransomware is similar to that of WannaCry Ransomware and is seen mainly targeting Brazilian victims.
Technically speaking, the said ransomware when executed will display a fake Word window takes time to open as it is busy encrypting files. As soon as the task of locking down files in the database is finished, RansSIRIA is seen popping up a plea to ransom and assures that the paid sum will be donated to help Syrian refugees.
After encrypting the files, the ransom note which is in the Portuguese language pleads the victims to pay the ransom to help thousands of human beings who are suffering from thirst, hunger, and wounds in Syria. Te note also specifies that those circulating the ransomware are not interested in the data or files and just want a small contribution to empathize those suffering in Syria.
Details of victims being offered decryption key in exchange of the Litecoin are unavailable.
In case, if anyone of you from any part of the world encounters such ransomware, Cybersecurity Insiders strongly discourages them from paying the ransom. Instead, opt for a data backup means or try to retrieve files using other means.
Note- Ransomware is a kind of malware which locks down files from access until a ransom is paid to the ransomware spreader or author. As the payment is being done through cryptocurrency, it is almost impossible to keep a track of such payments due to the use of Blockchain technology. And security experts suggest that only a few of the ransomware authors offer the decryption key in exchange for the ransom.
