Scare ware & Ransom ware
The Scams
Scareware
Commonly referred to as the RCMP or Ukash scam, these highly organized scams first surfaced in the UK and have the following footprint:
locks you out of your computer or your computer freezes and safe modes are disabled on reboot
pop ups warning about discovering child porn on your computer
claims to be from a local government office (FBI, RCMP, or CSIS)
must pay a set amount (usually $100) via Ukash as a fine
What is Ukash?
Ukash is a UK online payment system. Ukash is regulated by the UK Financial Services authority, so you should treat your Ukash vouchers as you would cash. Ukash is used primarily to protect your credit card information in online transactions and is not related to the scam.
Ransomeware
Not unlike the scareware scams above, the ransomware scam footprint is slightly different:
encrypts your personal files (music, pictures, documents, etc.)
pop ups giving instructions for payment of a ransom to “get your files back”
Payment is usually requested in bitcoin
Watch For
pop ups on web sites that require a click (”your computer has a virus...”)
links or attachments in emails, especially spam emails or virus emails (”click here to speed up your computer”)
rogue security software (”free antivirus scans from a web site..”)
Remedy
The good news is that these scam have gotten lots of press and attention recently, therefore awareness is up.
For the scareware scam you can usually boot to a repair disk and restore to an earlier version of the OS. Alternatively you can try to boot to a USB memory stick or uninfected CD/DVD from a reputable antivirus company (or one that you created earlier).
For Ransomware like FileFix there are plenty of free tools from many reputable vendors. For earlier variants like GPcode you can delete the encrypted files and restore from a backup. (see Fireye Labs and Symantec)














