The MafiaWare Ransomware is a dangerous new virus which has been detected as being a new strain of the popular HiddenTear project. Read further to learn how to remove active infections and restore your files.
About The MafiaWare Ransomware
MafiaWare ransomware is a dangerous new virus threat which has been identified recently by the security experts. It is confirmed that it is a HiddenTear variant which is made by a criminal developer known as mafia.
Upon infection it follows the typical infection pattern pattern by encrypting target user files using the AES cipher and extorting the victims for a ransomware payment. The encryption engine targets the most widely used user data file types – audio, videos and photos, databases, backup images and other related types of data.
When the encryption process is complete a ransomware note in a READ_ME.txt file is crafted. It contains the following message:
Your files has been encrypted by depsex
Pay $155 to my bitcoin address 1CS7x***
And send the proof to my email [email protected]
All affected files receive the .Locked-by-Mafia extension.
How Does The MafiaWare Ransomware Infect Computers
The MafiaWare ransomware is distributed using the usual virus delivery tactics. This is done mainly through spam email messsages that contain links to infected binaries or directly attach them. In some of the cases they may pose as legitimate files of interest such as documents, invoices and other data that the user may open.
How To Remove The MafiaWare Ransomware and Recover Affected Files
You can use a trusted anti-spyware solution to remove active infections and protect your computer .