So far we have all heard about malware Ransomware who is accustomed to encrypting files or locking the victim's computer and asking for money to decrypt or unlock files and systems.
Emsisoft has spotted a new one Malware Ransomware called "Linkup“, and recognizes it as “Trojan-Ransom.Win32.Linkup.” This Malware does not lock down the victim's computer or encrypt the files. It blocks Internet access by modifying the computer's DNS settings, and turns your computer into one robot minings Bitcoin.
Just the Linkup Trojan installed on his victim's system, creates a copy of himself and disables all selected Windows security and services that will try to stop the infection. DNS that will add to the infected system will only allow malware to communicate with the internet.
It will then display a fake notification on the screen of the victim, which is supposed to be from the Council of Europe. The notice accuses the victim of “Child Pornography” and will allow access to the Internet if the victim pays a minimal fine of 10 Euro cents.
It is still unconfirmed that if the amount requested is claimed, malware will restore access to the Internet or not, but it is probably a lie. To pay the ransom amount you must use your credit card and submit your personal details. (Would you do it from an infected computer?)
In addition to blocking Internet access, Linkup also tries to download and install other malicious programs. With these it will turn the victim's computer into a Bitcoin miner, connected to a botnet, so that they can combine the computing power of many infected computers and earn more Bitcoins.
Η Emsisoft says about malware:
"If o computer you are infected, do not pay ransom or give any personal information. Install it Emsisoft Anti-Malware remove the malware and reset your system DNS settings. ”
