New Ransomware as a Service Starts Up

Friday, January 20, 2017 @ 02:01 PM gHale

Satan is a new ransomware that scrambles the names of encrypted files and appends the .stn extension to them, a researcher said.

Anyone can use Satan for free, but the person that sells the malware gets a 30 percent commission for each successful ransom request in exchange for providing the service.

New Ransomware Tries to Grow Organically
Exploit Kit Jumps on Old Applications
Cyber Ransom Attacks on Rise
Phishing Flourishes on Overconfidence

The malware ended up promoted as a ransomware as a service (RaaS). Satan ended up reported on Twitter by security researcher Xylitol.

A visit to the service’s website (on Tor) reveals a well-designed page that offers users the possibility to create a variant of the malware, a choice of obfuscation techniques for the dropper, a way to translate the ransom note, and a way to contact the malware author.

In its own version of a dashboard, registered users can also see how many of the ransomware instances they sent out were successful, and the amount they earned.

It remains unknown which encryption method Satan uses so there is no available decryption tool.

Leave a Reply

You must be logged in to post a comment.