Incidents

New file-encryptor on the loose in Russia

Here in Russia we are getting letters from users who have been hit by Virus.Win32.JuNy.b. This virus is very similar to Virus.Win32.GPCode. It encrypts files on the local system. The sender then attempts to blackmail the victim. Currently the price for having your files de-encrypted is 20 dollars in web money.

We have been detecting JuNy.b since September 29. Everybody should make sure they have updated their antivirus databases. However, if you do get hit please contact us at newvirus@kaspersky.com ASAP. You’ll know if you’ve been hit if you suddenly can’t access a large number of files and you have a text file (the name is in Russian and roughly translates as “C****_has come to visit”) either on your desktop or in the temp folder.

Note: At the time of writing, Virus.Win32.JuNy.b is spreading only in Russia. If we get reports from other countries we will post an update on the blog.

New file-encryptor on the loose in Russia

Your email address will not be published. Required fields are marked *

 

Reports

BlindEagle flying high in Latin America

Kaspersky shares insights into the activity and TTPs of the BlindEagle APT, which targets organizations and individuals in Colombia, Ecuador, Chile, Panama and other Latin American countries.

APT trends report Q2 2024

The report features the most significant developments relating to APT groups in Q2 2024, including the new backdoor in Linux utility XZ, a new RAT called SalmonQT, and hacktivist activity.

Subscribe to our weekly e-mails

The hottest research right in your inbox