Popcorn Time Ransomware Gives Free Decryption Key

(pc-Google Images)

Researchers have discovered a new Popcorn Time Malware which offers free encryption to the victim if he infects two other people using the referral link facilitated by the ransomware.

Spotted by MalwareHunterTeam, Popcorn Time securely encrypts the data on your computer while displaying a fake installation screen, and asks $770 for ransom money. But before you become too helpless and finally decide to give money to the hackers to get the encryption key, it put up condition to allow free encryption for you.

To facilitate this, the Popcorn Time ransom note will contain a URL that points to a file located on the ransomware's TOR server. At this point, the server is down, so it is unsure how this file will appear or be disguised in order to trick people to install it.

Popcorn Time ransomware, currently in development, encrypts files present on the Desktop, My Pictures, My Music, My Documents. It targets every possible file extension you could think. The extension .filock is added to every encrypted file, for instance, myfile.txt becomes myfile.txt.filock after the encryption. After it finishes encryption, it creates two files (restore_your_files.html and restore_your_files.txt) containing the ransom note. It then displays the ransom message automatically.

You can make hit and trial attempts for the encryption key. If you enter the wrong key four times, all of your data will be deleted.