NewsBTC
No Result
View All Result
  • Cryptocurrency News
    • Bitcoin News (BTC)
    • Ethereum News (ETH)
    • Ripple News (XRP)
    • Shiba Inu News (SHIB)
    • Cardano News (ADA)
    • Dogecoin News (DOGE)
    • Solana News (SOL)
    • Litecoin News (LTC)
    • Avalanche News (AVAX)
    • Polygon News (MATIC)
  • Crypto Prices
    • Binance Coin (BNB) Price
    • Bitcoin (BTC) Price
    • Cardano (ADA) Price
    • Chainlink (LINK) Price
    • Dogecoin (DOGE) Price
    • Ethereum (ETH) Price
    • Litecoin (LTC) Price
    • Polkadot (DOT) Price
  • Crypto Resources & Directory
  • All Crypto
  • Play GamesTry
  • CasinosTry
Breaking News: Coinbase Confirms DOJ Investigation Following Major Security Incident
  • Cryptocurrency News
    • Bitcoin News (BTC)
    • Ethereum News (ETH)
    • Ripple News (XRP)
    • Shiba Inu News (SHIB)
    • Cardano News (ADA)
    • Dogecoin News (DOGE)
    • Solana News (SOL)
    • Litecoin News (LTC)
    • Avalanche News (AVAX)
    • Polygon News (MATIC)
  • Crypto Prices
    • Binance Coin (BNB) Price
    • Bitcoin (BTC) Price
    • Cardano (ADA) Price
    • Chainlink (LINK) Price
    • Dogecoin (DOGE) Price
    • Ethereum (ETH) Price
    • Litecoin (LTC) Price
    • Polkadot (DOT) Price
  • Crypto Resources & Directory
  • All Crypto
  • Play GamesTry
  • CasinosTry
Bitcoin News
No Result
View All Result
Breaking News: Coinbase Confirms DOJ Investigation Following Major Security Incident

Hackers Adopt SaaS Model to Support Bitcoin Ransomware Schemes

NewsBTC
NewsBTC
1 year ago
3 mins read
Ransomware demanding bitcoin

Reason to trust

Strict editorial policy that focuses on accuracy, relevance, and impartiality
Created by industry experts and meticulously reviewed
The highest standards in reporting and publishing
How Our News is Made

Strict editorial policy that focuses on accuracy, relevance, and impartiality

Ad discliamer

Morbi pretium leo et nisl aliquam mollis. Quisque arcu lorem, ultricies quis pellentesque nec, ullamcorper eu odio.

The Year 2015 saw cyber criminals implement new strategies to extort money, many taking their ransoms in bitcoin. The one that got everybody’s attention as the year came to a close was Ransom32 – a JavaScript-based ransomware which freezes the files in a user’s computer until a ransom is paid in bitcoin.

The revelation was first made on BleepingComputer.com by an infected user who complained that he could not access the data on his computer, including pictures, documents, and mp3.

Bleeping Computer editor Lawrence Abrams told BBC.com that the infection “was designed for those that lacked the technological skill to create their own brands of malware.”

Security expert Graham Cluley also told BBC:

“By turning their ransomware into a sellable service, the criminals behind Ransom32 are providing an opportunity for other hackers to easily launch attacks that will encrypt users’ documents, including personal photographs, movies and more.“

Security expert Fabian Wosar of Emsisoft and security researcher xXToffeeXx analyzed this Ransomware as a Service or RaaS, and have brought to light some important facts about the infection.

Key Points About Ransom32

  • It is located on an underground TOR network, and can be downloaded when a bitcoin address is submitted.im1
  • After a user submits the bitcoin address, he is presented with an administration panel, where he can configure the amount of bitcoin in ransom, and get access to data such as the number of people who already paid the ransom.

im2

  • The program is the first virus written in HTML, CSS and JavaScript languages.
  • The malware developers demand a 25% cut of any ransom collected the user downloading the virus and send the rest to the bitcoin wallet address supplied.

How Does it Work?

After finishing the configuration of Ransom32, the Download client.scr button at the bottom of the page needs to be hit. The download is a 22MB, self-extracting RAR file which unpacks into several files totaling over 67MB. The files are then extracted into C:UsersUserAppDataRoamingChromeBrowser, along with a shortcut in StartUp Programs so that the ransomware initiates when the computer boots up.

Some of the extracted files are:

  • Chrome – Holds the General Public License agreement.
  • chrome.exe – A packaged NW.js file that contains the malware code.
  • g – This file stores important information required by the malware. This includes the bitcoin ransom amount, the bitcoin address being used, and an error message if the configuration was enabled to do so.
  • rundll32.exe – A TOR executable file that links the malware with the TOR Command and Control server.
  • s.exe – This creates the shortcut in the Startup folder.

The malware encrypts the files of the users using Advanced Encryption Standard (AES) and decrypts them only after the asked ransom is paid in bitcoin. Ransom32 specifically targets commonly used file extensions such as .jpg, .jpeg, .tif, .gif, .wma, .avi, .mp4, and .docx. An extensive list of targeted extensions can be found here.

In a blog post titled Meet Ransom32: The first JavaScript ransomware, security expert Fabian Wosar also gave an extensive review of the malware, reiterating that the best protection against the attack remains a solid and proven backup strategy.

Apart from maintaining a backup of important files, users are advised to install the best anti-malware and internet security programs to stay protected from an increasing number of cyber attacks. They might not provide 100% cover but will definitely thwart such malicious attacks with their strong defense.

Image Credits: Bleeping Computers

Tweet123Share196ShareSend
NewsBTC
NewsBTC

NewsBTC

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Disclaimer: The information found on NewsBTC is for educational purposes only. It does not represent the opinions of NewsBTC on whether to buy, sell or hold any investments and naturally investing carries risks. You are advised to conduct your own research before making any investment decisions. Use information provided on this website entirely at your own risk.

Related News

Ethereum Turns Key Resistance Into Support – Momentum Builds For Range Breakout

Ethereum Turns Key Resistance Into Support – Momentum Builds For Range Breakout

Ethereum is consolidating above the $2,500 mark, showing resilience amid broader market uncertainty. While bulls have successfully flipped $2,500 from...

Sebastian Villafuerte 6 hours ago
Ethereum

Ethereum ETF Inflows Hit 8-Week Streak—Institutions Still Buying

Data shows the US Ethereum spot ETFs have seen net inflows for eight consecutive weeks now, a sign of continued...

Keshav Verma 7 hours ago
Bitcoin

Bitcoin Price Crash To $92,000 Or New ATHs? Analyst Explains The 2 Options

Bitcoin’s recent price action is holding firm above the $108,000 level despite a string of minor pullbacks in recent trading...

Scott Matherson 9 hours ago
Load More

Reason to trust

Strict editorial policy that focuses on accuracy, relevance, and impartiality
Created by industry experts and meticulously reviewed
The highest standards in reporting and publishing
How Our News is Made

Strict editorial policy that focuses on accuracy, relevance, and impartiality

Ad discliamer

Morbi pretium leo et nisl aliquam mollis. Quisque arcu lorem, ultricies quis pellentesque nec, ullamcorper eu odio.

Related News

ビットコイン23万ドル予測、注目の仮想通貨プレセールにも期待高まる

Фьючерсы на биткоин восстанавливаются, но сигналы Price Action вызывают опасения

lisachaikina 1 hour ago
Bitcoin

Bitcoin Bull Flag Breakout Confirmed — What Happens Next?

Sandra White 2 hours ago

Snorter 募資達 160 萬 打造更聰明的迷因幣量化機器人

estherw 4 hours ago

Premium Sponsors

Press Releases

  • 🚀CRYPTO MINING FIRM launches an APP cloud mining...

    4 hours ago
  • Felpörgő alternatív kriptovaluta a Dogecoin (DOGE) helyett – 650 dollárból 65 000 dollár lehet 4 hónap alatt

    Felpörgő alternatív kriptovaluta a Dogecoin (DOGE)...

    11 hours ago
  • 3 figyelemre méltó altcoin 2025. júliusának első hetében

    3 figyelemre méltó altcoin 2025. júliusának első...

    13 hours ago
  • Oblíbená alternativa Dogecoinu (DOGE), která z 650 USD udělá 65 000 USD za 4 měsíce

    Oblíbená alternativa Dogecoinu (DOGE), která z 650 USD...

    14 hours ago
  • 3 altcoiny, které sledovat v prvním týdnu července 2025

    3 altcoiny, které sledovat v prvním týdnu července 2025

    15 hours ago

Newsletter

Be the first to get the latest important crypto news & events to your inbox.

  • This field is for validation purposes and should be left unchanged.

About Us

NewsBTC is a cryptocurrency news service that covers bitcoin news today, technical analysis & forecasts for bitcoin price and other altcoins. Here at NewsBTC, we are dedicated to enlightening everyone about bitcoin and other cryptocurrencies.

We cover BTC news related to bitcoin exchanges, bitcoin mining and price forecasts for various cryptocurrencies.

Disclaimer: The information found on NewsBTC is for educational purposes only. It does not represent the opinions of NewsBTC on whether to buy, sell or hold any investments and naturally investing carries risks. You are advised to conduct your own research before making any investment decisions. Use information provided on this website entirely at your own risk.

Company

  • About Us
  • Advertising
  • Contact Us
  • Privacy Center

Social

© 2025 NewsBTC. All Rights Reserved.

  • Cryptocurrency News
    • Bitcoin News (BTC)
    • Ethereum News (ETH)
    • Ripple News (XRP)
    • Shiba Inu News (SHIB)
    • Cardano News (ADA)
    • Dogecoin News (DOGE)
    • Solana News (SOL)
    • Litecoin News (LTC)
    • Avalanche News (AVAX)
    • Polygon News (MATIC)
  • Crypto Prices
    • Binance Coin (BNB) Price
    • Bitcoin (BTC) Price
    • Cardano (ADA) Price
    • Chainlink (LINK) Price
    • Dogecoin (DOGE) Price
    • Ethereum (ETH) Price
    • Litecoin (LTC) Price
    • Polkadot (DOT) Price
  • Crypto Resources & Directory
  • All Crypto
  • Play Games
  • Casinos
Advertise

© 2025 NewsBTC. All Rights Reserved.

This website uses cookies. By continuing to use this website you are giving consent to cookies being used. Visit our Privacy Center or Cookie Policy.