Simplocker Crypto-Malware Now Locks Backup Files, Targets Larger Audience

Simplocker ransom message - screenshot on softpedia

A new variant has been detected for the Android ransomware Simplocker and it comes with encryption capabilities for archives, which are is the preferred format of many backup apps for mobile devices.

Security researchers at ESET, who uncovered the first trace of the crypto-malware for mobile in the first place, warn that the fresh strain has been prepared for targeting a larger audience, as the ransom message is now in English and the demanded fee increased to $300 / €222.

Cybercriminals seem to have learned their lessons during the test run on the Russian-speaking victims and included 7z, ZIP and RAR compression formats on the list of files the malware should be encrypting.

These types of archives are the most popular when creating safety copies of the Android device with a backup app. As such, when the device is infected, the victim can no longer restore the information from the backup because it is also encrypted and its contents cannot be accessed; thus, the crooks increase the chances of getting paid.

Full story plus screenshot - http://news.softpedia.com/news/Android-Simplocker-Now-Encrypts-Backup-Files-451703.shtml