- Category
- Criminal · Financially motivated: ransomware, fraud and theft.
- Origin
- Unknown
- Seen
- 2013
- Status
- Dormant
- Sources
- 2 sources carry it
- Identifier
- GINC-APT-1131 · jcrypt
What it is
Ransomware written in C#. Fortunately, all current versions of the MafiaWare666 ransomware are decryptable. The Threat Lab from Avast has developed a free decryption tool for this malware.
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- Other names
- Crypted, Daddycrypt, Foxxy, Iam_watching, Locked, Mafiaware666, MALKI, MALWAREDEVELOPER, Ncovid, NotStonks, Omero, Poison, RIP lmao, Vn_os, Wearefriends