Categories: EducationMalware

Blackshades Ransomware Accepts PayPal Payments For Decryption

Not a week goes by before a new type of ransomware is discovered all of a sudden. One of the recent installments to hit the markets is called Blackshades, and it is openly daring security researchers to best it. However, this is also one of the cheapest strains of ransomware to get rid of.

Do Not Mess With Blackshades Ransomware

As one would come to expect from ransomware these days, the malicious code will encrypt all files on a computer. Software like this does not discriminate between documents, movies, or pictures, and

Blackshades is no different in that regard. A special “.Silent” file extension is generated for every file that gets encrypted.

What is rather intriguing is how Blackshades uses a command and control server, something most newer versions of ransomware seemed to shy away from. But that is not all, as the software will try to connect to Google during the encryption process, as well as keep a log of how many files have been encrypted.

But that is not the strangest part about Blackshades. In most cases, ransomware removal is a very costly manner, with prices ranging from US$300 to several thousand dollars. But this particular strain only asks for US$30, which may entice a lot of its victims just to pay the fee and be done with it. A smart strategy, if that is the case.

Related Post

Moreover, this is one of the very few types of ransomware that accepts payments to be made in either Bitcoin or PayPal. This latter option is of significant interest, as it far from anonymous. But so is Bitcoin, even though very few people seem to realize that. The assailants also use a Proton Mail email address from which they will send decryption instructions.

Security researchers have their work cut out for them as far as Blackshades is concerned, though. Every ransomware leaves explicit messages on a computer. But with this malware, the messages contain hidden notes for researchers, which is putting a lot of them on edge. For the time being, the distribution method of this ransomware remains a mystery, but fake patches and videos are the most plausible source for now.

Source: Threatpost

Images credit 1,2

If you liked this article follow us on Twitter @themerklenews and make sure to subscribe to our newsletter to receive the latest bitcoin and altcoin price analysis and the latest cryptocurrency news.

JP Buntinx

JP Buntinx is a FinTech and Bitcoin enthusiast living in Belgium. His passion for finance and technology made him one of the world's leading freelance Bitcoin writers, and he aims to achieve the same level of respect in the FinTech sector.

Share
Published by
JP Buntinx

Recent Posts

FOMO Selling Trigger $1 Billion Liquidations as LINK & SOL Bleed Heavily; What to Do Next?

In the past, Chainlink (LINK) and Solana (SOL) have been among the most discussed altcoins…

2 hours ago

Qubetics $7.4M Presale Revolutionises Blockchain as Bitcoin and Chainlink Drive Innovation: Best Cryptos to Buy for 2025

The crypto market is abuzz with excitement as 2025 approaches. While Bitcoin continues to dominate…

8 hours ago

Best Altcoins to Buy Today: Why Qubetics’ Presale Could Be the Best Investment Opportunity of 2024

The cryptocurrency market never sleeps, and every day feels like an adventure. From household names…

14 hours ago

Forget DOGE and SHIB: These 5 Memecoins Are 2025’s Millionaire Makers

The memecoin craze is evolving, and a new wave of contenders is rising. With fresh…

22 hours ago

While Ethereum Approaches $6K, XYZVerse Prepares for a 16,900% Market Shakeup

As Ethereum's value inches toward unprecedented heights, another digital asset is set to make a…

23 hours ago

Four Meme Coins That Might Disappoint and One That Could Deliver Big Gains

Meme coins are the wild cards of the crypto world—one day they're "to the moon,"…

23 hours ago