Ransomware meets sextortion: this ransomware demands explicit pics to unlock your data

We just released an updated decryptor for the “Ransomwared” strain of ransomware that can unlock files appended with extensions such as .ransomwared and .iwanttits.

While most ransomware strains require monetary compensation in return for a decryptor, Ransomwared is demanding a more unusual payment.

Ransomwared pop-up

Once a computer is infected, a pop up will appear and demand that the victim send the author pictures of “tits” in exchange for an “unlock code.”

Ransomwared unlock code UI

We’re not sure whether the threat actor wants bodily parts or birds – but we suspect the former – and nor are we sure how the actor would know whether said bodily parts/birds actually belong to the victim. So perhaps sending a photo of this handsome chap would suffice.

Chestnut-bellied tit. Image credit to Robert tdc.

That said, as we’ve released a decryptor for Ransomwared, victims need not send either. You can download the Ransomwared decryptor here.

Download the Ransomwared Decryptor Here

Emsisoft Ransomwared Decryptor

Support for this tool is provided by the experts at Bleeping Computer. If you need help using it, please post details of your problem here.