Black Friday sale is here! Enjoy 20% OFF Emsisoft Enterprise Security. Offer ends on Dec 17, 2023.

Ransomware meets sextortion: this ransomware demands explicit pics to unlock your data

Ransomwared Decryptor by Emsisoft

We just released an updated decryptor for the “Ransomwared” strain of ransomware that can unlock files appended with extensions such as .ransomwared and .iwanttits.

While most ransomware strains require monetary compensation in return for a decryptor, Ransomwared is demanding a more unusual payment.

Ransomwared pop-up

Ransomwared pop-up

Once a computer is infected, a pop up will appear and demand that the victim send the author pictures of “tits” in exchange for an “unlock code.”

Ransomwared unlock code UI

Ransomwared unlock code UI

We’re not sure whether the threat actor wants bodily parts or birds – but we suspect the former – and nor are we sure how the actor would know whether said bodily parts/birds actually belong to the victim. So perhaps sending a photo of this handsome chap would suffice.

Chestnut-bellied tit. Image credit to Robert tdc.

Chestnut-bellied tit. Image credit to Robert tdc.

That said, as we’ve released a decryptor for Ransomwared, victims need not send either. You can download the Ransomwared decryptor here.

Download the Ransomwared Decryptor Here

Emsisoft Ransomwared Decryptor

Emsisoft Ransomwared Decryptor

Support for this tool is provided by the experts at Bleeping Computer. If you need help using it, please post details of your problem here.

Senan Conrad

Senan Conrad

Senan specializes in giving readers insight into the constantly and rapidly changing world of cybersecurity. When he’s not tapping away at his keyboard, he enjoys drinking a good coffee or tinkering in his workshop.

What to read next