DeadSec-Crypto Ransomware

The DeadSec-Crypto Ransomware is a Trojan that displays ransoming messages that it supports with complementary attacks for deleting or locking your files. Although it's not likely of causing damage to the OS, the DeadSec-Crypto Ransomware can deprive you of access to your media, and malware experts recommend preventing an infection, if possible. Most anti-malware products should delete the DeadSec-Crypto Ransomware, and backups and other, freeware solutions can assist you with data recovery.

South America Becomes a Target for Fictional Hackers

Even illicit businesses, such as file-encrypting and extorting campaigns, know the power of a good brand. For some threat actors, that may mean misappropriating the name of another entity, even including a fictitious one like the Watch Dog video game's 'DedSec.' The new Trojan that is bearing the misappropriated identity, the DeadSec-Crypto Ransomware, is in the middle of development currently, but malware experts deem its payload primed for targeting Brazilian systems.

TRhe DeadSec-Crypto Ransomware may compromise a PC through such typical methods as hiding its installer in an e-mail attachment or bundling itself with other downloads. While seemingly designed as a file-encrypting threat that could block your files through enciphering them, malware experts have not yet seen successful encryption attacks from the DeadSec-Crypto Ransomware. The Trojan does include code for deleting different files on the infected PC, instead, which may target content according to either their format (such as DOC, RTF, or PDF) or location.

The Trojan's other feature creates an advanced Web pop-up. This window delivers instructions in Brazilian Portuguese on paying ransoms for the decryption service. While the DeadSec-Crypto Ransomware may display this procedure as if the decryptor is native to the transaction process, the threat actors also claim to delete the decryption key after a week, meaning that any file-unlocking results are dependent on their generosity.

Taking Care of the Real Problems from Gaming's Con Artists

As often is the case with file-encrypting Trojans, no matter what countries they're attacking, the DeadSec-Crypto Ransomware's authors are using a combination of misinformation, threats, and various social engineering tactics to encourage fast ransom payments. By using a cryptocurrency like Bitcoin, the DeadSec-Crypto Ransomware's authors protect themselves from any refunds or other, legal actions. Meanwhile, the victim's recovery of any locked files requires the largesse of the already rewarded con artists.

As an unfinished Trojan, the DeadSec-Crypto Ransomware also can delete files without your consent and may use this capability for removing backups and other, recovery-related content on your PC. Save your backups remotely to keep Trojans like the DeadSec-Crypto Ransomware from gaining access to them. Malware experts also encourage scanning every newly-downloaded file with anti-malware solutions able to identify and remove the DeadSec-Crypto Ransomware, or other threats that might install it.

The DeadSec-Crypto Ransomware makes paying a ransom as easy as completing a side quest in a console game, but the rewards are much less sure. When reading messages from remote attackers who are already compromising your PC, considering the chances that they are liars is an obvious way to protect your money, in addition to your files.