Security researchers have discovered a new type of ransomware that not encrypts but also deletes files every hour until the victim pays the ransom of $150 in Bitcoin. It's the first time a ransomware variant of this type has been discovered.
(Image credit: Bleeping Computer)
The ransomware is called Jigsaw, it got its name because the ransom note shows a mask from character of the horror movie series Saw. Once the ransomware has infected the computer and encrypted photos, pictures, documents, videos and music it deletes several files and shows a notice that it will continue to delete files as long as no payment is made. After each hour also a counter is increased showing the number of files to be deleted the next hour.
Everytime the computer is restarted or the ransomware processes is killed, Jigsaw will delete thousand (!!) files.
Jigsaw can be recognized by the .FUN extension it adds to files. Users infected by Jigsaw are lucky, researchers have found a way to decrypt the files encrypted by the ransomware. Using the free tool 'Jigsaw Decrypter' it's possible to get the files back unencrypted.
