one detected new ransomware in India that forces its victims to do good deeds to recover their files.
Specifically, this ransomware causes its victims to donate new clothes to homeless people, feed children in pizzerias, and provide financial aid to those who need urgent medical care but cannot afford it.
The ransomware, called Good willit may also result in temporary and possibly permanent loss of company data, possible closure of company operations, and loss of revenue.
“GoodWill ransomware was identified by CloudSEK researchers in March 2022. As the name of the threat group suggests, operators are allegedly interested in promoting social justice rather than conventional financial reasons«Clousek said in a report.
Once infected, the GoodWill ransomware worm It encrypts documents, photos, videos, databases and other important files and makes them inaccessible without the decryption key.
The actors suggest that the victims perform three social activities in exchange for the decryption key: donate new clothes to the homeless, record the action and post it on social media, take five unfortunate children to Dominos Pizza Hut or KFC for treatment, take pictures and videos and post them on social media, and provide financial assistance to those who need urgent medical care but cannot afford it, at a nearby hospital, record the audio and share it with operators.
Upon completion of the three activities, the ransomware asks victims to write a note on social media (Facebook or Instagram) about “how you became a kind human being by falling victim to a ransomware called GoodWill”.
Upon completing the three activities, ransomware operators scan victim’s shared media files and social media posts.
Then the actor will share the complete decryption system which includes the main decryption tool, the file with the password and a video tutorial on how to recover all important files.