DoppelPaymer the Doppelganger Ransomware

A new week, a new ransomware variant seems to be an ongoing trend in the digital realm. This week continues the trend with news emerging of the discovery of a new ransomware variant, called DoppelPaymer. The new ransomware has been seen to be infecting victims since mid-June with the ransom asked sometimes topping hundreds of thousands of USD. According at security firm CrowdStrike the ransomware has seen at least eight variants which have extended the malware’s capabilities with each successive variant, the first of these dates back to April of this year. DoppelPaymer takes its name from another ransomware BitPaymer, from which the early copies much of the latter’s code. Despite the similarities in the source code between the two pieces of malware, there are significant differences between the two. CrowdStrike noted that, “There are obvious similarities between the tactics, techniques, and procedures (TTPs) u...

V6cye Ransomware

V6cye is a ransomware-type infections that belongs to Snatch ransomware family. This malware is designed to encrypt data and to make ransom demands. While encrypting, V6cye adds ".v6cye" appendix to each filename. Additionally, V6cye drops "RESTORE_V6CYE_FILES.txt" text file on victim's desktop. This ransomware was firstly discovered by Michael Gillespie. The created text file delivers a message informing victims about the current situation and stating that only V6cye's developers are capable of restoring data. Unfortunately, this is true. Each victim gets a unique decryption key which is necessary to restore data. The problem is that all keys are stored in a remote server controlled by cyber criminals. Therefore, in order to receive the key each victim has to contact V6cye's developers. After doing so, victims will be asked to pay a ransom in exchange for the key. The price is currently unknown - all deta...