ESET detects major increase of dangerous Filecoder Trojans

ESET’s HQ Malware Research Lab has reported an unusual spike in the activity of Filecoder malware – Trojans that can encrypt user’s files and try to extort a ransom from the victim in exchange for a decrypting software. ESET LiveGrid technology has shown a rising weekly number of Win32/Filecoder detections by over 200% since July 2013 from average numbers in January June 2013.

To infect the computer, cybercriminals are using various infiltration methods: drive-by downloads from malware-laden websites; e-mail attachments, installation through another Trojan or Backdoor, or even manual installation by the attacker.

Robert Lipovsky, Malware Researcher, ESET, said, TheWin32/Filecoder malware family is more dangerous than other types of so-called ransom ware as they usually encrypt pictures, documents, music and archives. A wide range of techniques and levels of sophistication has been seen in different variants over time. It can be very expensive. Malware samples in this malware category usually request sums around €100–€200. However, some have been seen extorting up to €3,000. The high amount is consistent with the fact that the attackers usually target businesses that can usually afford to pay higher ransoms than individuals.

ESET advises Internet surfers to stay protected with regularly updated Antivirus software (ESET products detect these dangerous files). And, it also recommends to keep the anti-malware software settings, password protected to prevent them being altered by an attacker and back up regularly.