MafiaWare ransomware is another copy of HiddenTear
MafiaWare virus is also known under DepSex virus name, and it belongs to the crypto-ransomware[1] family. Just like every other data-encrypting ransomware, this one encodes all files stored on a compromised computer in order to convince the victim to pay a ransom[2]. Simply said, this malicious program seeks to extort money from victims who have security vulnerabilities on their computers by making all personal data inaccessible. However, if MafiaWare ransomware has attacked your computer, it might be possible to recover encoded files for free. The virus reportedly is a variant of HiddenTear, an open source virus[3], so most likely you will be able to recover your files without spending a cent. You will find detailed data recovery instructions at the end of this post.
However, let’s discuss how this virus operates. First of all, it uses AES encryption standard[4] to cipher files and make them inaccessible, and then adds .Locked-by-Mafia file extensions to original filenames. For example, a picture.jpg becomes picture.jpg.Locked-by-Mafia. During the encryption, files are modified on a structural level and accessing them again becomes possible only if one obtains a unique decryption key. Sadly, this decryption key is stored in criminals’ servers, and crooks suggest revealing it only under one condition – if the victim pays a ransom. To explain how to buy this decryption key, virus’ creates a Notepad file called READ_ME.txt (a ransom note). This file contains only a few lines. It says that records have been encrypted by depsex, which might be the virus’ name or the nickname of the hacker, which demands $155 from the victim. The attacker wants to receive the money in Bitcoin currency and asks to send a “proof” to his/hers email dompetpresiden@gmail.com. However, if you need your files and if you do not like to waste your money, better remove MafiaWare virus from the system using proper malware removal programs (for instance, FortectIntego or SpyHunterCombo Cleaner), and then use data recovery methods described below MafiaWare removal instructions to recover your files for free.
How did this virus enter my system?
MafiaWare ransomware is currently being distributed via malware-laden email letters[5]. Criminals might try to convince you to open a suspicious attachment added to an email, stating that it contains some important information that you should immediately review. Please bear in mind that criminals frequently pretend to be someone else, so if you receive a trustworthy-looking letter from Paypal or Amazon, do not rush to open files attached to it. You should carefully inspect sender’s email address and look for grammar mistakes in the message because crooks often leave ridiculous mistakes when writing a message to the victim. Finally, do not forget to protect your PC with anti-malware software if you want to prevent malicious attempts to encrypt your files and harm your computer.
How to remove MafiaWare virus?
Victims who have their computers compromised by MafiaWare malware should not waste any time and remove MafiaWare virus as soon as possible. This should be done with the help of anti-malware software unless you are an IT expert. It is not easy to remove a malicious virus, because unlike regular programs, it does not provide an uninstaller and also tends to hide its elements deeply in the computer system. Below, you can find a full MafiaWare removal guide that will help you to get rid of this malicious program for good.
Was this guide helpful?
2 comments