New ransomware threat "Browlock" freezes computers and demands payment

Share this article:

Security firm F-Secure is tracking a new "ransomware" family known as Browlock, which spreads by tricking unsuspecting web surfers into believing the police are after them.

Researchers said they have detected infections on machines in the United States, Canada and the U.K. And now, other countries are experiencing attacks. F-Secure traced the attacks to a server in St. Petersburg, Russia.

If users surf to a compromised site foisting the scam or click on a malicious ad, their screen becomes locked, and a message is displayed. The messages are customized to appear like they come from federal authorities in the victim's home country or region, including the European Cybercrime Centre and the Royal Canadian Mounted Police.

Users are told they have violated the law because either they have committed copyright infringement, viewed or distributed child pornography, or unknowingly allowed their computer to be accessed to install malware. They are further advised that to unlock their computer and avoid prosecution, they must pay a fine of, in one case, 200 pounds, or $310, through an online payment site.

"This ransomware is very simple, and just uses the browser to display a lock screen demanding the victim to pay a fake fine and plays tricks to prevent closing the browser tab," F-Secure Labs wrote in a blog post.

Ransomware scams are prevalent. The FBI has estimated criminals profit roughly $150 million annually through the ruses.

Victims are advised to keep their anti-virus technology up to date and to never pay the miscreants behind the scams. Removing ransomware is usually possible with the help of a security solution, but oftentimes the process can be complicated and may require restoration of one's operating system, which could result in the loss of documents or applications.

Share this article:

Sign up to our newsletters

More in News

EFF intros wireless router software to boost industry standard

EFF intros wireless router software to boost industry ...

This weekend, the digital rights group released a "hacker alpha" version of its Open Wireless Router software.

Breaches driving organizational security strategy, survey indicates

Breaches driving organizational security strategy, survey indicates

CyberArk interviewed 373 IT security executives and other senior management in North America, Europe and the Asia-Pacific as part of its eighth annual Global Advanced Threat Landscape survey.

Siemens industrial products impacted by four OpenSSL vulnerabilities

The vulnerabilities can be exploited remotely, and fairly easily, by an attacker to hijack sessions and crash the web server of the product.