Ranstop blocks Eva Richter (Ordinypt) ransomware

Ransomware test subject – Eva Richter (Ordinypt) German speakers were recently hit by a series of malware campaigns, distributing fake ransomware. We call it fake because even though it destroys user files, the victim cannot recover its files, even if the ransom is paid. The campaign starts with an email, received from somebody named ‘Eva […]

Nemty ransomware attack blocked by Ranstop

Ransomware test subject – Nemty Nemty is a relatively new ransomware, spotted at the end of the last month, and has seen a few iterations since its appearance. The very first variant had references to the Russian president and antivirus. More precisely, the code contained a link pointing to a picture of the Russian president […]

Ranstop blocks Phobos ransomware

Ransomware test subject – Phobos Phobos appeared on the ransomware scene late 2018 – early 2019, and since then, the developers released more than 50 variants, making the family one of the most active of this year. The malware itself is closely related to Dharma (or CrySis), and we can only assume that the actors […]