The people who did pay with Bitcoins said they found the process for getting them was so cumbersome that it took them a week to figure it out.”Īnother major stumbling block that prevents many otherwise willing victims from paying the ransom is, ironically, antivirus software that detects CryptoLocker - but only after the malware has locked the victim’s most prized files with virtually uncrackable encryption.

“We put up survey and asked how many had paid the ransom with Bitcoins, and almost no one said they did, Abrams said. Part of the problem, according to Abrams, is that few victims even know about Bitcoins or MoneyPak, let alone how to obtain or use these payment mechanisms. “They decided there’s little sense in not accepting the ransom money a week later if the victim is still willing to pay to get their files back.” “They realized they’ve been leaving money on the table,” Abrams said. Or, at least, that’s how it worked up until a few days ago, when the crooks behind this scam began easing their own rules a bit to accommodate victims who were apparently willing to pay up but simply couldn’t jump through all the hoops necessary in the time allotted.

Victims who pay the ransom receive a key that unlocks their encrypted files those who let the timer expire before paying risk losing access to their files forever. CryptoLocker then demands payment via Bitcoin or MoneyPak and installs a countdown clock on the victim’s desktop that ticks backwards from 72 hours. as well as any files on attached or networked storage media. The malware encrypts all of the most important files on a victim PC - pictures, movie and music files, documents, etc. To recap, CryptoLocker is a diabolical new twist on an old scam. This message is left by CryptoLocker for victims whose antivirus software removes the file needed to pay the ransom.

Open crypto locker on purpose