Ransomware Disguised as Cyberpunk 2077 Targets Android and Windows Users
Cybercriminals are spreading the CoderWare ransomware by disguising it as Windows and Android versions of the highly publicized game Cyberpunk 2077. In other words, attackers are once again leveraging popular trends to boost the success of their campaigns.
The attackers are distributing fake installation files for Windows and Android operating systems, claiming they are the newly released Cyberpunk 2077 video game from CD Projekt. Unsuspecting users end up installing the CoderWare ransomware on their systems. Notably, the operators of this malware are the first cybercriminals to exploit the Cyberpunk 2077 theme in this way.
Previously, similarly resourceful hackers tried to trick Android users with a fake installer for the game Fortnite.
The use of Cyberpunk 2077 as bait was reported by Tatyana Shishkova, a specialist at Kaspersky Lab. Shishkova first encountered the Android version of the ransomware, which was being distributed through a platform disguised as the legitimate Google Play Store.
Fortunately, CoderWare uses the RC4 algorithm with a hardcoded key. This means that victims can decrypt their files without paying a ransom to the operators. In November, researchers discovered a Windows version of the fake Cyberpunk 2077 installer.
Users are strongly advised to be extremely cautious about what they download from unverified sources, and when it comes to games, it’s always best to purchase them legally, friends.
- Source
- Our other channels
- Our friends and partners