GoodWill ransomware forces victims to help poor and sick

Security researchers have uncovered a ransomware group dubbed GoodWill , which, as the name suggests, is run by operators that promote social justice rather than personal gain. GoodWill ransomware is written in .NET and detects the location of the infected device. Once infected, it encrypts important files such as documents, photos, videos, databases, etc. The operator asks victims to complete three social justice activities to obtain decryption Keys: donate clothes to the homeless, record and post on social media; take five poor kids to a Domino’s, Pizza Hut or KFC for dinner, take photos and videos to post on social media; give emergency medical assistance But patients without money for financial assistance are recorded and shared with operators. After completing the three tasks, the operator will verify the verification and then provide the complete decryption tool.

This article is reproduced from:
This site is for inclusion only, and the copyright belongs to the original author.

Leave a Comment