Filecoder, the ransomware demanding payment for file recovery: prevention tips

Filecoder is a cyber threat not to be underestimated: it blocks files and holds them hostage, demanding a ransom for their decryption.

In recent months, a virus has been spreading with considerable speed in Italy: it is called Filecoder, or more specifically, Win32/Filecoder.
This is a Trojan horse that, once it infiltrates a PC, “hijacks” files by encrypting them.
To regain full control of the material and the PC itself, the user is forced to pay a ransom to receive the decryption software.
The ESET NOD32 Research Center has registered this surge in Filecoder’s spread and activity, reporting a significant +200% increase in infections compared to the average of the previous semester.
Furthermore, a particularly insidious version of the same malware displays a countdown timer on the PC screen; if payment is not made within that timeframe, the decryption key for the files is permanently deleted, making it virtually impossible to recover the content of one’s hard drive.

Robert Lipovský, an ESET researcher, explains that the ransom can be quite substantial, with demands starting from 100 euros and potentially reaching up to 3000 euros.
From the ESET NOD32 laboratories, the following recommendations are provided:

• Protect computers with antivirus software.
• Perform regular updates of these programs.
• Secure anti-malware software settings with passwords.
• Perform regular backups.

 

Pubblicato in Guides & Tutorials