Skip to main content

WannaLocker — A New WannaCry-inspired Ransomware Is Attacking Android Smartphones


After wrecking havoc on unpatched Windows computers using WannaCry, some new notorious hackers from China are targeting Android smartphones. They’ve copied the look of WannaCry and developed an Android ransomware, which is being called
WannaLocker. Being spread via gaming forums, this ransomware disguises itself as a plugin for game King of Glory.
It looks like the popularity of WannaCry has inspired cyber criminals to fabricate similar ransomware and spread it using various media. Security news website Bleeping Computer has reported that Chinese hackers have developed an Android ransomware that looks like WannaCry ransomware and tricks the Android users into paying the ransom.
The security firm Avast has detected this ransomware and called it WannaLocker. This ransomware was first spotted by Chinese security firm Qihoo 360.
It should be noted that WannaLocker infects the files stored on the external storage of the infected device. It’s also interesting to see that the ransomware demand being made by WannaLocker hackers is 40 Chinese Renminbi, which is about 5-6 dollar. They are demanding the ransom in regular currency using payment services like Alipay or WeChat.
Given the deeper access of Chinese authorities in technology companies, it won’t take the law enforcement agencies to track down the masterminds.
wannalocker ransomware
Image: Avast
WannaLocker ransomware is spreading on Chinese game forums. It imitates itself as a plugin for game King of Glory. After making way to the device, it hides from the app drawer and starts encrypting files stored on the external storage.
wannalocker ransomware extension
Image: Avast
WannaLocker uses AES encryption and ignores the files whose names start with “.” and other files that have “DCIM”, “download”,  “miad”, ”android” and “com.” in the path. The ransomware adds an extension to the encrypted files, which is highlighted below:

How to protect yourself from WannaLocker?

  • Avoid downloading software and plug-ins from random sources.
  • Look for official download websites and try to verify their authenticity.
  • Make sure to regularly backup your data.
  • Use a security software for real-time protection.
  • If you’re infected, don’t pay ransom. Seek professional help.
Qihoo 360 has also shared the “King of glory auxiliary” or WannaLocker ransomware decryption tool. Enter code 0778 for download.
Did you find this update on WannaLocker Ransomware helpful? Don’t forget to share your views inside comments.

Comments

WHAT'S HOT

Learn How To Download Videos From Popular Platforms Such As YouTube, Facebook, Twitter, Instagram And Any Others

Having trouble downloading that video your crush shared on Instagram or one of those adorable cat videos on YouTube? Refer our guide to learn how to download videos from popular platforms such as YouTube, Facebook, Twitter, Instagram and many others.

Microsoft Has Released The First Windows 10 Build 16353 For Insiders

As Fall Creators Update is nearing its release, Skip Ahead was announced last month. It enables fast ring users to continue receiving new features, though the RS_PRERELEASE

The First Ubuntu 17.10 Beta Release Is Finally Here-Download 7 Different Flavors Here

Following the tradition, the first Beta release hasn’t witnessed the participation of default Ubuntu release, which will now ship with GNOME desktop environment. This brings us to the

Apple Has Confirmed The LTE Issues With Its New Watch Series 3

Before the product starts shipping on Friday, Apple has confirmed the existence of LTE issues with its new Apple Watch Series 3. Reviewers noted the wearable has