New ransomware XData is rapidly spreading in Ukraine

Source : 112 Ukraine

The pace of XData spreading is three times more than Wanna Cry virus
16:22, 22 May 2017

Open source

Specialists from Malware Hunter Team have found the new ransomware called XData last week and it is spreading faster than Wanna Cry attack. 109 unique computer infections were recorded as of May 19, most of them targeted Ukrainian users. This was reported by the Malware Hunter team on Twitter.

At the same time, it is noted that just about several dozen Ukrainian users were affected by Wanna Cry virus, which targeted more than 200 thousand computers all around the world. Thus the rate of XData spread is three times as much.

Emsisoft informs that XData ransomware encrypts data using AES, then demands ransom payments to bring the files back.


.~xdata~ extension is also added to the encrypted files.


It is currently unknown how the virus spreads and how it affects computers. The standard ways for ransomware viruses are phishing attacks through e-mails with infected attachments, usage of software exploits, fake advertising links, infected installers and others.

Specialists also note that they have no idea how to decrypt the files without paying money.

Related: Microsoft president: Global cyber attack is signal for everyone

Related: Cyber group associated with Russia can be implicated in ransomware attack

Related: Ransomware infection: Online map of massive cyber attack made public

Система Orphus

If you find an error, highlight the desired text and press Ctrl + Enter, to tell about it

see more