Subscribe to RSS News Feed
About Spamhaus  |  Press Office  |  FAQs   
Fake 'Spamhaus' MoneyPak Ransomware 'Blocked PC' Virus

2013-04-16 14:00:04 UTC, by Quentin Jenkins
Recent News Articles

Network Hijacking on the Rise

Subscription Bombing: COI, CAPTCHA, and the Next Generation of Mail Bombs

More Domain Stats: The 10 Most Abused Registrars

SBL/ZEN DNS lookups to return DROP/eDROP status

Spamhaus Presents: The World's Worst Top Level Domains

Verizon Routing Millions of IP Addresses for Cybercrime Gangs

Brazilian internet users suffer SoftLayer's security fail

Network under attack? You might be surprised where that's coming from!


Older News Articles:
Spamhaus News INDEX

A number of Internet users are reporting a fresh version of a ransomware virus circulated by cyber criminals which exploits the name and image of Spamhaus to trick computer users into paying fake fines using MoneyPak. Computer users should know that no authorities or organizations (including Spamhaus) use screen blocking messages to collect fines for any law violations. Users whose screens are blocked by this MoneyPak Ransomware Virus should research these sites to remove the problem from Windows OS machines:

At www.malwaretips.com - This is a guide to using the Windows System Restore tool to remove the infection.

At www.bleepingcomputer.com - This is a step-by-step guide showing how to use Rkill will try to disarm the infection.

Both these are do-it-yourself free ways to remove the infection. If they seem too confusing, please look to an IT professional for assistance. Also, do try have the latest and best Windows OS anti-virus installed and running at all times.

Others have posted some ideas at this Yahoo website.

The fake 'Spamhaus' window:


This "Spamhaus branded" ransomware was first spotted by Spamhaus over a year ago. We are also working to have this version's Command & Control server at "xblblock.com" shut down.
See also: Spamhaus Online Agent (MoneyPak Scam)

Spamhaus Information

Press Office
Spamhaus News Index
Spamhaus in the media
About Spamhaus
Spamhaus Official Statements
Article Information

Permanent link to this news article:
Fake 'Spamhaus' MoneyPak Ransomware 'Blocked PC' Virus
https://www.spamhaus.org/news/article/697/fake-spamhaus-moneypak-ransomware-blocked-pc-virus

Subscribe to RSS News Feed
Spamhaus News Quotes

Permission to quote from or reproduce Spamhaus News articles is granted automatically providing you state the source as Spamhaus and link to the news record.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy