Security company discovers first ransomware

Security company Eset has discovered a malware, which locks the smartphones or tablets, which have downloaded it, for 24 hours, letting go only in exchange for ransom payment.

Once downloaded onto the device, the ransomware, which the company has billed as Android/Simplocker, takes aim for certain files on its SD card, encrypts them and superimposes the message “WARNING your phone is locked!” on the device’s screen.

The amount demanded by the malware is a little above GBP 13.

It also relays information from the device to a command-and-control server.

“While the malware does contain functionality to decrypt the files, we strongly recommend against paying up – not only because that will only motivate other malware authors to continue these kinds of filthy operations, but also because there is no guarantee that the crook will keep their part of the deal and actually decrypt them,” Eset said in a blog post, describing Simplocker.

Dr Steven Murdoch, of the University of Cambridge’s Computer Laboratory, said, “Smartphone users should be very cautious of installing software from sources other than the operating system-provided application store, and should pressure their phone supplier to promptly provide security updates to defend against known vulnerabilities.”