If you ever get hit by ransomware that encodes the names of encrypted files using the .stn extension, then you are a victim of Satan, not the "Prince of Darkness", but the new Ransomware service of the same name. Yes a new Ransomware as a Service is released online.
The new ransomware was spotted on Wednesday by security researcher Xylitol and as it turns out, the new RAAS is being marketed underground Forums.
Anyone can use Satan for free, as reported by the seller, but should give 30 a percentage of each successful ransom payment in return for the service.
A visit to by clicking here of the service (on Tor) reveals a very well-designed page that offers users the ability to create a variant of the malware to their liking.
Those interested can choose dropper hiding techniques, and have the ability to translate the note for ransom, change ways of communicating with the victim, or choose how the malware communicates with them.
Through this site, registered users using the service can also see how many of the attacks with the ransomware were successful, and the amount they have earned so far.
Right now, we don't know the encryption method that Satan uses, so it's probably too early to talk about tool decryption.
So beware of your online walks because, unfortunately, Satan RAAS is extremely easy to use and accessible to anyone who has no hesitation even if it does not have any special knowledge.
