UPDATED 23:25 EDT / JANUARY 03 2017

INFRA

Koolova ransomware lectures users on downloading unknown files

In a rather bizarre twist to the ongoing saga that is ransomware infections, a new strain has been discovered that lectures users on the dangers of downloading unknown files from the Internet.

Dubbed Koolova, the ransomware is said to act like similar strains in that it will encrypt a victim’s files and then display a screen asking for a demand to be met. It’s complete with a countdown clock by which files on the infected computer are deleted if demands are not met in time.

That’s where the similarities end, though. Koolova then presents a splash screen lecturing the owner of the infected machine about the dangers of ransomware and then offering to release the now-encrypted files if they read two online articles about the dangers of ransomware and downloading of unsafe files.

If the two links are not clicked, the ransomware does deliver on its promise and deletes files on the infected machine, according to Bleeping Computer. Once both articles have been read, a “Decrypt My Files” button becomes available, which then connects to a Command & Control server to retrieve a decryption key. The key allows infected users to unlock their files.

The malware itself is described as being in “development,” so it’s unlikely to be running wild currently, but that is not to say that it soon couldn’t be. Because clicking through on the two links doesn’t remove it from a machine, using a ransomware removal tool is recommended.

Image courtesy of Bleeping Computer/Koolova designers

A message from John Furrier, co-founder of SiliconANGLE:

Your vote of support is important to us and it helps us keep the content FREE.

One click below supports our mission to provide free, deep, and relevant content.  

Join our community on YouTube

Join the community that includes more than 15,000 #CubeAlumni experts, including Amazon.com CEO Andy Jassy, Dell Technologies founder and CEO Michael Dell, Intel CEO Pat Gelsinger, and many more luminaries and experts.

“TheCUBE is an important partner to the industry. You guys really are a part of our events and we really appreciate you coming and I know people appreciate the content you create as well” – Andy Jassy

THANK YOU