CrazyCrypt Ransomware

The CrazyCrypt Ransomware is a variant of the FTSCoder or the Stupid Ransomware, which can encrypt your files and deliver ransom notes for the unlocking service. This version of the file-locker Trojan, also, includes UI aspects it borrows from Hidden Tear and the Jigsaw Ransomware and threatens the future deletion of your hostage files. Victims should disinfect their PCs and uninstall the CrazyCrypt Ransomware with a suitable anti-malware application immediately before using any appropriate free solutions for file recovery.

The Stupid Just Got a Little Crazy

A file-locking Trojan is borrowing parts of others' software, seemingly randomly, for cobbling together a Frankenstein's monster of a campaign. While the .NET Framework-based result, the CrazyCrypt Ransomware, isn't any more efficient than a Ransomware-as-a-Service equivalent necessarily; it is unique and may coerce the victim with misleading messages that supplement its attacks. Although encryption is the first issue regarding the CrazyCrypt Ransomware infections, taking its instructions at face value may cause financial problems that are preventable wholly.

The CrazyCrypt Ransomware uses a non-secure encryption method for blocking files on the computer, which gives the victims cause to celebrate; malware experts have found past members of the Stupid Ransomware's family using more permanent 'locking' behavior, including damaging the files permanently by overwriting them. Interestingly, though, the victim-facing parts of its payload borrow aspects of separate families, ranging from Utku Sen's Hidden Tear to the infamous Jigsaw Ransomware.

The CrazyCrypt Ransomware launches pop-up windows using HTA content that imitates the text of the Jigsaw Ransomware, which is well-known for deleting files whenever it restarts, as well as on a countdown. Since the CrazyCrypt Ransomware doesn't use the Jigsaw Ransomware's underlying code, however, the text is a bluff. Likewise, users should beware of paying the decryption ransom; malware experts estimate a free solution being available for the CrazyCrypt Ransomware relatively soon.

Bringing Down the Insanity of Hybrid Trojans

The CrazyCrypt Ransomware could compromise Windows PCs after interactions with anything from e-mail-spammed attachments to file-shared torrents, although one out of every two cyber-security products identifies the latest samples correctly. Besides the protection that such software can provide, malware analysts suggest backing up all files of any value to other devices, which provides a bulletproof defense nearly all file-locking Trojans. Those without that resource should contact reputable researchers in the industry for help with cracking the CrazyCrypt Ransomware's encryption algorithm.

The CrazyCrypt Ransomware's author may not be ready for implementing his Trojan in the wild, and some parts of the campaign show symptoms of being in-construction, such as the non-functionality of the premium decryption service. This problem is one of many cases where victims that rush into paying the ransom will end up losing money for no advantage. Anti-malware software can, as noted previously, delete the CrazyCrypt Ransomware, in many cases, but can't decrypt your media.

The fact that the CrazyCrypt Ransomware's authors don't care if their ransom note describes what the Trojan does accurately showcase the inherent disingenuousness inside the industry of file-locking Trojans. Consistently, a criminal's word isn't something that's worth your money