PGPCoder: Difference between revisions

Content deleted Content added
SmackBot (talk | contribs)
m date/fix the maintenance tags
Fact tags for stuff nbot found inthe credited sources - need precise cites
Line 1:
{{Orphan|date=November 2006}}
{{cleanup|date=June 2008}}<!-- claims need precise cites -->
PGPCoder is a Trojan that encrypts files on the infected computer and then asks for a fee in order to release these files. It has also been called GPcode. This is a new type of behavior, rarely seen until now, and to which the FBI in the United States are now alert.
 
Line 15 ⟶ 16:
Since the decryption key can be trivially derived from the Trojan
antivirus companies have been able to develop a complete "cure" for the
data modifications that this Trojan makes.{{Fact|date=June 2008}}<!-- not present in sources credited below --> It follows that PGPcoder is not a true
cryptotrojan.{{Fact|date=June 2008}}<!-- conclusion not present in sources credited below -->
cryptotrojan. A cryptovirus, cryptotrojan, or cryptoworm contains and uses the
public key of the attacker. In cryptoviral extortion, the malware hybrid encrypts
the victim's data using the attacker's public key. Analysis of the malware does not
Line 22 ⟶ 24:
have no recourse but to pay the extortionist or lose the data. This attack is one of many
in the field known as [[Cryptovirology]]. Victims of PGPcoder are lucky that it is
not a true cryptotrojan and therefore does not carry out cryptoviral extortion.{{Fact|date=June 2008}}<!-- commentary not present in sources credited below -->
 
credits 1: http://forums.maddoktor2.com/index.php?s=49f622ff62e8bd1a3612d45d35f78708&showtopic=4532&st=0&#entry26348