Ransomware meets sextortion: this ransomware demands explicit pics to unlock your data

Ransomwared Decryptor by Emsisoft

We just released an updated decryptor for the “Ransomwared” strain of ransomware that can unlock files appended with extensions such as .ransomwared and .iwanttits.

While most ransomware strains require monetary compensation in return for a decryptor, Ransomwared is demanding a more unusual payment.

Ransomwared pop-up

Ransomwared pop-up

Once a computer is infected, a pop up will appear and demand that the victim send the author pictures of “tits” in exchange for an “unlock code.”

Ransomwared unlock code UI

Ransomwared unlock code UI

We’re not sure whether the threat actor wants bodily parts or birds – but we suspect the former – and nor are we sure how the actor would know whether said bodily parts/birds actually belong to the victim. So perhaps sending a photo of this handsome chap would suffice.

Chestnut-bellied tit. Image credit to Robert tdc.

Chestnut-bellied tit. Image credit to Robert tdc.

That said, as we’ve released a decryptor for Ransomwared, victims need not send either. You can download the Ransomwared decryptor here.

Download the Ransomwared Decryptor Here

Emsisoft Ransomwared Decryptor

Emsisoft Ransomwared Decryptor

Support for this tool is provided by the experts at Bleeping Computer. If you need help using it, please post details of your problem here.

Senan Conrad

Senan Conrad

As a cybersecurity enthusiast, Senan specializes in giving readers insight into the ever-changing world of malware, and the ransomware scene in particular. When he's not tapping away at his keyboard, you can catch Senan drinking a good coffee or tinkering in his workshop.

What to read next