HOT LINE 1654

Alerts

“LeakerLocker”- New ransomware threat after “WannaCry” and “Petya”

20 Jul 2017

This time the new virus attack targeting Android users is spread to phones through fraudulent applications in Google Play Store. LeakerLocker claims that they seize personal photos, messages, internet browsing history and mails of users, threatening them with a certain amount of money that they will send all this information to the contacts on users’ phone. Thousands of Android users have been threatened by this virus. After a minute of virus spreads to your phone, it locks your phone and gives this message: “All your personal information has been transferred to our secure cloud. Within 72 hours this data will be sent to everyone in your phone and email contacts. To abort this action, you have to pay $ 50.“

LeakerLocker ransomware has been detected by McCafe cyber security agency in 2 Google Play Store apps- “Wallpapers Blur HD” and “Booster & Cleaner Pro”. According to McCafe, both applications have been reported to Google and are currently under investigation by experts. Nevertheless, LeakerLocker can still be spread over your mobile phone while you are installing random apps. 

To avoid this malware threat, Cyber Security Center recommends the following:

  • If you downloaded one of these 2 apps, delete it immediately.
  • Be careful while downloading apps, read the comments and check the ratings of the app.
  • If the app wants non-content related permission from you to manage contacts, photos and calls on your phone, dismiss it and delete the app immediately.
  • If your mobile phone is already infected by the malware and you are required to pay ransom, don’t do it. Because it encourages hackers to create new similar attacks like that and threat others. Paying ransom does not guarantee that all your personal information will be deleted from their servers.

If you have already faced this threat, you should call Cyber Security Center’s hotline 1654 or write mail to team@cert.az .