Fake ransomware 'cures' actually just pay the scammer

In an interesting new trend some companies are claiming to be able to unlock encrypted files following a ransomware attack, but are in fact simply acting as brokers between victims and attackers. Researchers at Check Point have discovered a Russian IT consultancy named Dr. Shifro that claims to unlock and recover consumers' and businesses' encrypted files. In fact, the company simply pays the ransomware's creator themselves and passes the cost onto the victim at a 75 percent-plus profit margin. So victim's files are decrypted, the cybercriminal gets a ransom payment and Dr. Shifro pockets a substantial fee. In one case… [Continue Reading]