If you are a smart techie guy and frequently use Internet and Email either for personal or professional work, government has a red alert for you all. A new Diavol Virus is spreading all through the internet. The virus can be easily transferred via email and once it activates within your system it is powerful enough to steal all your money. The virus can work on any smart device such as PC, Laptop, smartphone, tablet, etc.
The ransomware is targeting Windows computers and once the payload is delivered it locks the PC remotely and asks for money from the user. For those unaware, ransomware is a type of sophisticated malware which locks the system entirely or important files and then blackmails the users to transfer money (via Bitcoins). If the user doesn’t transfer the ransom then the files are usually deleted or the PC may be rendered useless.
CERT-In in its latest advisory warned about the ransomware called Diavol. According to the advisory, thai ransomware is compiled with Microsoft Visual C/C++ Compiler. “It is encrypting files using user-mode Asynchronous Procedure Calls (APCs) with an asymmetric encryption algorithm,” it said.
After the Diavol malware infects a PC, it carries out pre-processing on the victim system including registering the victim device with a remote server, terminating running processes, finding local drives and files in the system to encrypt, and preventing recovery by deleting shadow copies. Then, the files are locked and desktop wallpaper is changed with a ransom message.
“Diavol also lacks any obfuscation as it doesn’t use packing or anti-disassembly tricks, but it still manages to make analysis harder by storing its main routines within bitmap images.
