PUBG Ransomware is a real thing

Published by

teaser

Ehm no, it's not a belated April Fool's Day joke, this actually looks to be a real thing. This PUBG Ransomware does not go in search of your hard earned cash, but rather will decrypt your hijacked files if you play PUBG for an hour (actually you just have the run an executable for 3 seconds).



It does however just give you the key to decrypt as well if an hour's worth of PUBG is not your thing. Discovered by MalwareHunterTeam, when the PUBG Ransomware is launched it will encrypt a user's files and folders on the user's desktop and append the .PUBG extension to them. When it has finished encrypting the files, it will display a screen giving you two methods that you can use to decrypt the encrypted files. 

PUBG Ransomware
Your files, images, musics, documents are Encrypted!

Your files is encrypted by PUBG Ransomware!
but don't worry! It is not hard to unlock it.
I don't want money!
Just play PUBG 1Hours!

Or Restore is [ s2acxx56a2sae5fjh5k2gb5s2e ]

As stated in the ransom instructions, the first method that can be used to decrypt the files is to simply enter the "s2acxx56a2sae5fjh5k2gb5s2e" code into the program and click the Restore button. 

If you want to be fancy, though, the ransomware also checks to see if your playing PlayerUnknown's Battlegrounds by monitoring the running processes for one named "TslGame" as shown below. Even though the ransom note states you need to run it for 1 hour, you only need to run the executable for 3 seconds. 

Once a user plays the game and the process is detected, the ransomware will automatically decrypt the victim's files. This ransomware is not too advanced as it only looks for the process name and does not check for other information to confirm that the game is actually being played. That means you can simply run any executable called TslGame.exe and it will decrypt the files - via bleeping computers.

PUBG Ransomware is a real thing


Share this content
Twitter Facebook Reddit WhatsApp Email Print