Subscribe to RSS News Feed
About Spamhaus  |  Press Office  |  FAQs   
Fake 'Spamhaus' MoneyPak Ransomware 'Blocked PC' Virus

2013-04-16 14:00:04 UTC   |   by Quentin Jenkins   |  
Recent News Articles

Spamhaus Botnet Threat Update: Q3-2019

Spamhaus DNSBL return codes: technical update

Enable badness and the stats will speak for themselves

MTA developers: allow use of domain DNSBLs at the SMTP level

Spamhaus Botnet Threat Update: Q2-2019

Spamhaus Botnet Threat Update: Q1-2019

Emotet adds a further layer of camouflage

Block 99.4% of spam using only Spamhaus’s blocklists and SpamAssassin


Older News Articles:
Spamhaus News INDEX

A number of Internet users are reporting a fresh version of a ransomware virus circulated by cyber criminals which exploits the name and image of Spamhaus to trick computer users into paying fake fines using MoneyPak. Computer users should know that no authorities or organizations (including Spamhaus) use screen blocking messages to collect fines for any law violations. Users whose screens are blocked by this MoneyPak Ransomware Virus should research these sites to remove the problem from Windows OS machines:

At www.malwaretips.com - This is a guide to using the Windows System Restore tool to remove the infection.

At www.bleepingcomputer.com - This is a step-by-step guide showing how to use Rkill will try to disarm the infection.

Both these are do-it-yourself free ways to remove the infection. If they seem too confusing, please look to an IT professional for assistance. Also, do try have the latest and best Windows OS anti-virus installed and running at all times.

Others have posted some ideas at this Yahoo website.

The fake 'Spamhaus' window:


This "Spamhaus branded" ransomware was first spotted by Spamhaus over a year ago. We are also working to have this version's Command & Control server at "xblblock.com" shut down.
See also: Spamhaus Online Agent (MoneyPak Scam)

Spamhaus Information

Press Office
Spamhaus News Index
Spamhaus in the media
About Spamhaus
Spamhaus Official Statements
Article Information

Permanent link to this news article:
Fake 'Spamhaus' MoneyPak Ransomware 'Blocked PC' Virus
http://www.spamhaus.org/news/article/697/fake-spamhaus-moneypak-ransomware-blocked-pc-virus

Subscribe to RSS News Feed
Spamhaus News Quotes

Permission to quote from or reproduce Spamhaus News articles is granted automatically providing you state the source as Spamhaus and link to the news record.
© 1998-2019 The Spamhaus Project SLU. All rights reserved.
Legal  |  Privacy