Specialists from Malware Hunter Team have found the new ransomware called XData last week and it is spreading faster than Wanna Cry attack. 109 unique computer infections were recorded as of May 19, most of them targeted Ukrainian users. This was reported by the Malware Hunter team on Twitter.
At the same time, it is noted that just about several dozen Ukrainian users were affected by Wanna Cry virus, which targeted more than 200 thousand computers all around the world. Thus the rate of XData spread is three times as much.
Based on our data, XData now has 3 times more unique victims from Ukraine than WannaCry got all time.— MalwareHunterTeam (@malwrhunterteam) 19 мая 2017 г.
We can say Ukraine is "under fire". pic.twitter.com/crillfBdWP
Emsisoft informs that XData ransomware encrypts data using AES, then demands ransom payments to bring the files back.
.~xdata~ extension is also added to the encrypted files.
It is currently unknown how the virus spreads and how it affects computers. The standard ways for ransomware viruses are phishing attacks through e-mails with infected attachments, usage of software exploits, fake advertising links, infected installers and others.
Specialists also note that they have no idea how to decrypt the files without paying money.