MafiaWare Ransomware Overview[]
MafiaWare Ransomware is a new Hidden Tear strain which uses the AES cipher to encrypt target user data. Like similar threats it extorts the computer victims for a ransom sum payment to restore access to the data. The affected file types include documents, multimedia files, backups, configuration files and are appended with the .Locked-by-Mafia extension.
MafiaWare Ransomware Note[]
The ransomware note is crafted in a READ_ME.txt file which contains the following message:
Your files has been encrypted by depsex
Pay $155 to my bitcoin address 1CS7x***
And send the proof to my email dompetpresiden@gmai1.com
MafiaWare Ransomware Distribution[]
MafiaWare Ransomware infects its targets by using botnets and email accounts to distributed spam email messages. The ransomware is contained in various attachments or links to the infected binaries. Other infection methods include malicious ads, browser hijackers and etc.