Hitler-Ransomware is fake crypto-virus, that is not actually encrypting your files. Alert message is written with tons of grammar mistakes and states, that user files are encoded and demands $25 ransom to be paid in 1 hour. Users need to buy Vodafone card with $25 value and send its code to the attackers. Many inexperienced users are scared with the message, and this is something that they expect.
REKTLocker is cryptographic virus, that that belongs to the category of ransomware viruses. It uses RSA-2048 encryption to encrypt important user files and adds .rekt to all affected files. Decryption key is stored on the remote server that is controlled by malefactors, that makes it very hard to decrypt files without paying the ransom. By the way, hackers demand a ransom of 1 BTC for the private key they will send to you.
Cerber2 is new version of Cerber ransomware, that we described in one of our previous articles. both viruses act in similar fashion, but new one adds .cerber2 extension instead of .cerber. After this virus asks for 1.24 bitcoins (~$500) for decryption service. As well as its predecessor, Cerber2 virus copies 3 files on you computer (#DECRYPT MY FILES#.txt, #DECRYPT MY FILES#.html, #DECRYPT MY FILES#.vbs).
Cerber is ransomware virus that encrypts your documents, images and music with AES encryption and adds .cerber extension to every encrypted file. After this virus asks for 1.24 bitcoins ($500) for decryption service. After infecting PC, Cerber virus creates 3 files (#DECRYPT MY FILES#.txt, #DECRYPT MY FILES#.html, #DECRYPT MY FILES#.vbs), that contain instructions to decrypt your files in different format and link to online "Cerber Decryptor".
Troldesh is family of ransomware viruses also called Shade Ransomware. Unique version of this threat can be created by anyone using special "developer kit", that is available on the underground forums. This virus targets Russian and American users. Malware encrypts user personal files and documents along with photos, music, videos with asymmetric encryption algorithm (RSA-2048 or RSA-4096). Ransomware appends .xtbl extension to all encrypted files.
