April 21, 2016 By Larry Loeb 2 min read

Horror films are being leveraged by the crypto-ransomware pushers in pursuit of your money. One ransomware strain, JIGSAW, uses the characters from the film “Saw” to instill fear into its victims.

Trend Micro found this malware out in the wild coming from a free cloud storage service. Although the site in question has hosted crypto-ransomware in the past, it did remove the links to it when notified. The security firm said JIGSAW can still be downloaded on another site, where it is most likely bundled inside cryptominer software.

JIGSAW’s Exponential Operations

When the malware is executed, it first presents a ransom note and an image from the “Saw” film. The ransom note, written in both Portuguese and English, tells the victim how the ransom will increase over time by an exponential amount. Additionally, the ransomware will delete growing numbers of the user’s files until payment is received.

JIGSAW deletes files and increases the ransom amount every hour. This applies increasing pressure on the victim to save the remaining files and avoid paying a larger ransom. The lowest amount the user can pay ranges from $20 to $150, according to Trend Micro.

According to the security firm, this is the first known ransomware to create a copy of user files, encrypt the copies into .fun files and then delete the originals. Variants use the .KKK, .BTC and .GWS extensions for the encrypted files, as well.

Security researchers also found an alternate version that shows adult images with the ransom note. It may use adult websites as an infection vector and includes a message threatening to expose users’ behavior unless they pay up.

Fear as a Tool for Crypto-Ransomware

The ransom note warned that if the user reboots the affected computer, 1,000 files will be deleted. Further, it threatens that no duplicate copies of these files will be made, so they would be lost forever after a restart. If the user does not pay the ransom after 72 hours, all encrypted files will be deleted.

This strain of crypto-ransomware extends the goal of all such malware: getting the victim to pay. It uses the fear factor along with the usual file attacks in an attempt to ensure that a payment is made. Defeating this sort of malware depends on user vigilance that protects against any ransomware, no matter how much it tries to instill fear.

More from

Regulatory harmonization in OT-critical infrastructure faces hurdles

3 min read - In an effort to enhance cyber resilience across critical infrastructure, the Office of the National Cyber Director (ONCD) has recently released a summary of feedback from its 2023 Cybersecurity Regulatory Harmonization Request for Information (RFI).The responses reveal major concerns from critical infrastructure industries related to operational technology (OT), such as energy, transport and manufacturing. Their worries include the current fragmented regulatory landscape and difficulty adapting to new cyber regulations. The frustration appears to be unanimous.Meanwhile, the magnitude of the threat…

Generative AI security requires a solid framework

4 min read - How many companies intentionally refuse to use AI to get their work done faster and more efficiently? Probably none: the advantages of AI are too great to deny.The benefits AI models offer to organizations are undeniable, especially for optimizing critical operations and outputs. However, generative AI also comes with risk. According to the IBM Institute for Business Value, 96% of executives say adopting generative AI makes a security breach likely in their organization within the next three years.CISA Director Jen…

Q&A with Valentina Palmiotti, aka chompie

4 min read - The Pwn2Own computer hacking contest has been around since 2007, and during that time, there has never been a female to score a full win — until now.This milestone was reached at Pwn2Own 2024 in Vancouver, where two women, Valentina Palmiotti and Emma Kirkpatrick, each secured full wins by exploiting kernel vulnerabilities in Microsoft Windows 11. Prior to this year, only Amy Burnett and Alisa Esage had competed in the contest's 17-year history, with Esage achieving a partial win in…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today