Traditional ransomware already does enough damage on its own, but what has just appeared on the Web has an absurd and, at the same time, perverted side to it. Instead of requesting a classic “ransom” in bitcoins or another cryptocurrency, the new nRansomware asks the victim for a minimum of ten nude photos before sending the code to release the data.
2017 has already left us with two massive ransomware campaigns, demonstrating once again the lack of preparation that some companies and organizations have against this type of attack. However, ransomware does not discriminate and also affects regular users with the same intensity. The main players in the computer security market do their best to offer robust protection solutions, but the entire situation amounts to an arms race, with both sides trying to stay one step ahead. Now, what happens when an attacker’s motivation is not money? Cryptocurrencies greatly simplify collecting “ransoms” and have become the preferred payment method, but the person behind the new nRansomware wants something else…
The bizarre ransom demand
Instead of paying with bitcoins or Ethereum, nRansomware claims a minimum of ten nude photos belonging to the user. The transfer of images must be carried out using a Protonmail email account, and once the author of the ransomware has “verified” the legitimacy of the photos, they will send the code. The whole process is so absurd that it is hard to take seriously. The lock screen image is composed of a mosaic of Thomas the Tank Engine screaming “F*ck You!”, while playing the opening song of the show Curb Your Enthusiasm in the background.
Now, is it a legitimate attack or not? Researchers have not commented on the matter, but they have confirmed that in reality the ransomware is not encrypting anything, but rather it is a screenlocker. In fact, its quality is so low that the code in the discovered sample is 12345… and it does not work correctly. On the other hand, Protonmail has already deactivated the address that appears on the image. Personally, I hope it is not a “test flight” for something more serious.
