Guru3D.com
  • HOME
  • NEWS
    • Channels
    • Archive
  • DOWNLOADS
    • New Downloads
    • Categories
    • Archive
  • GAME REVIEWS
  • ARTICLES
    • Rig of the Month
    • Join ROTM
    • PC Buyers Guide
    • Guru3D VGA Charts
    • Editorials
    • Dated content
  • HARDWARE REVIEWS
    • Videocards
    • Processors
    • Audio
    • Motherboards
    • Memory and Flash
    • SSD Storage
    • Chassis
    • Media Players
    • Power Supply
    • Laptop and Mobile
    • Smartphone
    • Networking
    • Keyboard Mouse
    • Cooling
    • Search articles
    • Knowledgebase
    • More Categories
  • FORUMS
  • NEWSLETTER
  • CONTACT

New Reviews
Radeon Series RX 6700 XT preview & analysis
Corsair MM700 & Corsair Katar Pro XT Review
Guru3D Rig of the Month - February 2021
ASUS GeForce RTX 3060 STRIX Gaming OC review
EVGA GeForce RTX 3060 XC Gaming review
MSI GeForce RTX 3060 Gaming X TRIO review
PALIT GeForce RTX 3060 DUAL OC review
ZOTAC GeForce RTX 3060 AMP WHITE review
Fractal Design Meshify 2 Compact chassis review
Sabrent Rocket 4 PLUS 2TB NVMe SSD review

New Downloads
FurMark Download v1.25
MSI Afterburner 4.6.3 Final Stable Download
Display Driver Uninstaller Download version 18.0.3.7
Guru3D RTSS Rivatuner Statistics Server Download 7.3.0 Final
Media Player Classic - Home Cinema v1.9.10 Download
GeForce 461.72 WHQL driver download
AIDA64 Download Version 6.32.5640 beta
CrystalDiskInfo 8.11.2 Download
AMD Radeon Adrenalin Edition 21.2.3 driver download
GPU-Z Download v2.37.0


New Forum Topics
Radeon RX 6700 XT would have a starting price of 479 USD and see better availability RX Vega Owners Thread, Tests, Mods, BIOS & Tweaks ! (cont.) AMD announces Radeon RX 6700 XT 12GB at 479 USD, launches on March 18th High CPU usage Radeon Software from 20.5.1 to the latest new Intel Re-Confirms March 30 for Rocket Lake-S Launch AMD Releases Ryzen Threadripper PRO, professional CPU series What changes did nvidia make to HDCP or DSC a few drivers back? Who is at fault? GeForce 461.72 WHQL drivers: download & discussion Should I sell it? 3090 Owner's thread




Guru3D.com » News » PUBG Ransomware is a real thing

PUBG Ransomware is a real thing

by Hilbert Hagedoorn on: 04/13/2018 07:02 AM | source: | 26 comment(s)
PUBG Ransomware is a real thing

Ehm no, it's not a belated April Fool's Day joke, this actually looks to be a real thing. This PUBG Ransomware does not go in search of your hard earned cash, but rather will decrypt your hijacked files if you play PUBG for an hour (actually you just have the run an executable for 3 seconds).

It does however just give you the key to decrypt as well if an hour's worth of PUBG is not your thing. Discovered by MalwareHunterTeam, when the PUBG Ransomware is launched it will encrypt a user's files and folders on the user's desktop and append the .PUBG extension to them. When it has finished encrypting the files, it will display a screen giving you two methods that you can use to decrypt the encrypted files. 

PUBG Ransomware
Your files, images, musics, documents are Encrypted!

Your files is encrypted by PUBG Ransomware!
but don't worry! It is not hard to unlock it.
I don't want money!
Just play PUBG 1Hours!

Or Restore is [ s2acxx56a2sae5fjh5k2gb5s2e ]

As stated in the ransom instructions, the first method that can be used to decrypt the files is to simply enter the "s2acxx56a2sae5fjh5k2gb5s2e" code into the program and click the Restore button. 

If you want to be fancy, though, the ransomware also checks to see if your playing PlayerUnknown's Battlegrounds by monitoring the running processes for one named "TslGame" as shown below. Even though the ransom note states you need to run it for 1 hour, you only need to run the executable for 3 seconds. 

Once a user plays the game and the process is detected, the ransomware will automatically decrypt the victim's files. This ransomware is not too advanced as it only looks for the process name and does not check for other information to confirm that the game is actually being played. That means you can simply run any executable called TslGame.exe and it will decrypt the files - via bleeping computers.



PUBG Ransomware is a real thing PUBG Ransomware is a real thing




« FutureMark To Change Name, Brand and Website towards UL · PUBG Ransomware is a real thing · ASUS Adds Compact and Lightweight X407 and X507 Laptops »

6 pages 1 2 3 4 5 6


Irenicus
Senior Member



Posts: 578
Joined: 2015-05-03

#5537294 Posted on: 04/13/2018 08:00 AM
The guy can't even spell!

And what happens if you don't have PubG?

Fox2232
Senior Member



Posts: 11515
Joined: 2012-07-20

#5537298 Posted on: 04/13/2018 08:06 AM
The guy can't even spell!

And what happens if you don't have PubG?
As written, just run any executable named "TslGame.exe".

fantaskarsef
Senior Member



Posts: 12057
Joined: 2014-07-21

#5537300 Posted on: 04/13/2018 08:07 AM
Uhm...

As stated in the ransom instructions, the first method that can be used to decrypt the files is to simply enter the "s2acxx56a2sae5fjh5k2gb5s2e" code into the program and click the Restore button.


The Laughing Ma
Senior Member



Posts: 4346
Joined: 2008-04-12

#5537354 Posted on: 04/13/2018 11:59 AM
I get that the guys behind PubG are a bit annoyed that Fornite is trashing them and that every man and his dog is now trying to shove a Battle Royale mode in to their game but ransom-ware to get you to play their god awful game... really?

PS I am aware that the chances the folks behind Pubg having anything to do with this are slim to zero. (gotta be careful with Pubg's developers they'll sue you for using a frying pan in your game.)

RealNC
Senior Member



Posts: 3177
Joined: 2011-11-24

#5537355 Posted on: 04/13/2018 12:00 PM
The guy can't even spell!

Yeah, he needs a news editor. :P

6 pages 1 2 3 4 5 6


Post New Comment
Click here to post a comment for this news story on the message forum.


Guru3D.com © 2021