Remove Backups Remove Consumer Services Remove Encryption Remove Passwords
article thumbnail

Evolution of JSWorm ransomware

SecureList

Several versions were released as part of each “rebranded” variant that altered different aspects of the code, renamed file extensions, cryptographic schemes and encryption keys. In addition, it deletes all system backups, shadow copies, disables the system recovery mode, and clears event logs. Encryption flaws.