NRansom Ransomware Demands Nude Photos from Victims

Recently, malware researchers came across a particularly odd piece of malware circuiting the Internet. This new pest goes by the name NRansom Ransomware and unlike most ransomware threats which target specific file types and encrypts all the data that falls within their requirements, threats it doesn't actually encrypt any of the victim's data. It has somewhat of a lazier approach – all it does, essentially, is locking the user's computer. NRansom Ransomware's executable file is named nRansom.exe. Now, we are leads us to the conclusion that it could only affect machines running Windows so if you're a using a Mac, or you're a Linux user, don't fret! Your nudes are safe.

Once You're Infected

If NRansom Ransomware finds its way into your computer, it would lock your screen and present you with a ransom note, white on black text, sitting on top of a background which consists of a repetitive image. In the said image you can see the beloved cartoon character Thomas the Tank Engine and the words "FUCK YOU!!!". As if this isn't enough, there's a little tune it would play on loop, for the victim's great displeasure. The song was recognized as the theme song of a popular show called Curb Your Enthusiasm. The mp3 file containing it is called "your-mom-gay.mp3". The authors of NRansom Ransomware provide the victim with an email where they are to contact them – 1_kill_yourself@protonmail.com – and provide the hackers with the goods demanded.

NRansom Ransomware's Demands

Here's where it gets a little spicier – instead of demanding money in exchange of unlocking the machine, NRansom Ransomware asks the victim to send them nudes. The authors of NRansom Ransomware know what they want and are very specific in their demands. NRansom Ransomware would ask you to provide them with "at least" 10 photos in the nude. You would also have to confirm that it is indeed you in the nudes. They don't specify how this confirmation process would go about. They do, however, admit that they aren't seeking the nude photos for personal use but are planning on selling them on the Deep Web for some good cash. That, of course, doesn't mean that they wouldn't use any nudes that they get their hands on to blackmail the victims. We're talking about cyber criminals after all.

Why You Shouldn't Worry

The good news is that NRansom Ransomware certainly does not seem like a prominent piece of software. Malware researchers who had first-hand experience with the threat report that it is quite buggy, and it might not always run as expected. In addition to this, the bad design and the lack of an encryption module are a sign that the authors are likely to be a bunch of teenagers who have nothing better to do with their time, and are also unable to implement any dangerous features in the garbage they dare to call "ransomware." While this is undoubtedly great to hear, you should keep in mind that there are far more dangerous and expensive file-encryption Trojans which are waiting for an opportunity to seize your files and extort you for money. Don't forget that the best way to keep file lockers and other malware away from your computer is to stay away from suspicious sites and files, as well as to use a state-of-the-art antivirus software suite.