SYMBOLCOMMON_NAMEaka. SYNONYMS
win.bitpylock (Back to overview)

BitPyLock

Bitpylock is a ransomware that encrypts files by using asymmetric keys and puts '.bitpy' as suffix once the encryption phase ended. The ransom note appears on the affected user's Desktop with the following name: "# # HELP_TO_DECRYPT_YOUR_FILES # .html". At the time of writing the ransom request is 0.8 BTC and the communication email is: helpbitpy@cock.li.

References
2020-01-21 ⋅ Bleeping Computer ⋅ Lawrence Abrams
BitPyLock Ransomware Now Threatens to Publish Stolen Data
BitPyLock
2020-01-14 ⋅ Yoroi ⋅ Yoroi
Analysis Run
BitPyLock
2020-01-09 ⋅ Twitter (@malwrhunterteam) ⋅ malwrhunterteam
Tweet on BitPyLock
BitPyLock

There is no Yara-Signature yet.