The Jdyi Ransomware is a file-locking Trojan that's part of a well-known Ransomware-as-a-Service, STOP Ransomware (or Djvu Ransomware). Because it uses frequently-secure encryption for locking the user's files, backups are essential for minimizing loss of documents and other data from infections. Traditional PC security services also will stop most attacks and should remove the Jdyi Ransomware from compromised systems. Fast distribution under many 'brand names' makes up a significant...

The H@RM@ Ransomware is a file-locking Trojan that's an update of the Wanna Scream Ransomware. The H@RM@ Ransomware can block media files with secure encryption and holds them as hostages while displaying a ransom note. Users must have backups on other devices for restoring any locked media, and most PC security solutions will identify and delete the H@RM@ Ransomware correctly. The small family of file-locker Trojans, Wanna Scream Ransomware – named as a riff off of the well-known ...

The Xdddd Ransomware is a file-locking Trojan from the family of the Paradise Ransomware. This Trojan blocks Windows users' files, generally, in regions outside of Post-Soviet states. Robust backups on other devices may be necessary for the recovery of any files that it attacks. Users with appropriate anti-malware products should quarantine or remove the Xdddd Ransomware as soon as possible after its detection. The Paradise Ransomware , a family of Trojans most notable for...

The Pizhon Ransomware is a file-locking Trojan that targets Russian victims. The Pizhon Ransomware blocks the user's media files and leaves multiple ransom notes that ask for money in return for an unlocking service. Users with secure backups can ignore the messages and recovery freely, and most PC security solutions will safely delete the Pizhon Ransomware. Although the time between old Russia-connected Trojans like the Energy Ransomware and the FakeMBAM Backdoor is far from ancient...

The ALVIN Ransomware is a file-locking Trojan of a currently unknown family. The ALVIN Ransomware can block the user's digital media files, such as documents, through encrypting them. The ALVIN Ransomware also changes their extensions and creates ransom messages recommending that victims pay Bitcoins for a recovery tool. Sufficient backup precautions will eliminate most dangers from this Trojan, along with PC security solutions for removing the ALVIN Ransomware installations. In both...

The ZaLtOn Ransomware is a file-locking Trojan that's an update of the Xorist Ransomware. The ZaLtOn Ransomware can block the user's files with encryption, create Windows pop-up alerts, and leave ransom notes that ask for Bitcoin ransoms. Freeware decryption services and secure backups are effective against this threat's attacks, and nearly all anti-malware tools should delete the ZaLtOn Ransomware quickly. What malware researchers peg as another variant on the Xorist Ransomware family,...

The Szymekk Ransomware is a file-locking Trojan and a variant of the Cobra Locker Ransomware (or Cobra_Locker Ransomware). The Szymekk Ransomware can block the user's media files with its encryption and create a screen-blocking pop-up window with its ransom demands. For protection, users should save backups to traditionally-secure locations for recovery and let reliable PC security solutions block or remove the Szymekk Ransomware. With one of its last variants being a Stephen King-inspired...

The _encrypted Ransomware is a file-locking Trojan that's independent of any confirmed Ransomware-as-a-Service or family. Like more well-known threats of its type, it blocks media files in Windows PCs by encrypting them, adds extensions to their names, and leaves ransom notes for victims. Users should have secure backups for protecting their files and let dedicated security services remove any the _encrypted Ransomware infections. Ransomware-as-a-Services offer a kudzu-like fast...

The Iiss Ransomware is a file-locker Trojan that's part of the Ransomware-as-a-Service of the STOP Ransomware. The Trojan can block most media files throughout the computer while deleting backups and creating ransom notes extorting money from victims. Users with practical anti-malware tools can remove the Iiss Ransomware safely before recovering their files from any remaining backups. File-locker Trojans can use seasonal themes that rotate with the most topical events, but not every threat...

The Montana Ransomware is a file-locking Trojan that updates previous threats, including the LeakTheMall Ransomware and the Hermes Ransomware. The Montana Ransomware blocks users' files by encrypting them and holds the data hostage, supposedly, until the attacker receives a ransom. Users on Windows systems always should back their work up for safety's sake and maintain anti-malware services for efficiently removing the Montana Ransomware. New versions of the  Hermes Ransomware...

The Beijing Ransomware is a file-locking Trojan with significant ties to previous ones, such as Hermes Ransomware and LeakTheMall Ransomware. The Beijing Ransomware uses the AES encryption for locking the user's digital media files before demanding a ransom through a text message. Users with anti-malware solutions should remove the Beijing Ransomware through them immediately before retrieving their work from their latest backups. Updates to the Hermes Ransomware family of 2017 may or may...

The YUFL Ransomware is a file-locking Trojan that's part of Dharma Ransomware's business, a Ransomware-as-a-Service. Threat actors may deploy this Trojan against servers or home computers for blocking their files with secure encryption. Users with backups experience minimal disruption from this Trojan, and most PC security products should remove the YUFL Ransomware. Flying under the old banner of the skull and crossbones, the Dharma Ransomware and its readily-identifiable ransom notes...

The Energy Ransomware is a file-locking Trojan that has no known family or Ransomware-as-a-Service. The Energy Ransomware blocks the user's files, such as documents and other media, by encrypting them before creating a text message asking for a ransom. Users should have backups appropriate for recovery without paying and let their preferred anti-malware solutions safely remove the Energy Ransomware installations. Russia returns to the forefront of the threat landscape, briefly, through a...

The XNMMP Ransomware is a file-locking Trojan that's an update to the CONTI Ransomware. The XNMMP Ransomware stops users from opening their files by encrypting them and offers the unlocking service for a ransom. Backups on other devices can help recover any files, although traditional cyber-security software should remove the XNMMP Ransomware from Windows PCs without issues. Sticking it out in the threat landscape long-term, especially for file-locker Trojans, isn't a given. Thus, it's...

The LolKek Ransomware is a file-locking Trojan that's from the BitRansomware Ransomware, a Ransomware-as-a-Service family. The LolKek Ransomware includes features especially helpful for sabotaging unprotected networks but may block users' files in most Windows environments. Users with backups on other, protected devices and credible anti-malware products for removing the LolKek Ransomware should be safe. Very soon, the fledgling Ransomware-as-a-Service,  BitRansomware Ransomware ,...