Cyberpunk 2077: Be careful, Android version is allegedly hiding malware!

We didn’t have to wait long for fake versions of Cyberpunk 2077 to start popping up, selling 13 million copies just days after its release. a real success Despite the numerous criticisms it has received. Therefore, it is a golden opportunity for hackers all over the world distribute malwareWhile the PS5 and Xbox Series X versions won’t be released until the end of 2021, one site is already an alleged Android version Game.

This is clearly a fake. Currently, and probably for a very long time, the only way to play Cyberpunk 2077 on Android is via Stadia. The scam is obvious as soon as you enter the site: It bears no resemblance to the official Cyberpunk 2077 page. On the contrary, the developers have chosen this page. A copy of Google PlayBut we see that over 1000 people have downloaded the app, which probably gives us confidence.are false positive comments was deposited into the site.

Cyberpunk 2077 Android version not available, ransomware

Hackers left nothing to chance to trick their victims. The page displays the weight of the download file as well as 3.4GBThis is a significant number for an Android app, but it seems plausible in light of the content of Cyberbunk 2077. Ultimately, this is not the case, because The file actually weighs 3 MBIf there are clear doubts about the reliability of the application at this stage, the doubts will be confirmed definitively when the application is submitted. Requesting access to photos and videos your smartphone.

If accepted by the user, the penalty is dropped and app reveals real ransomware identityThe files located on the phone are then fully encrypted and display the extension . .coderCryptA README.txt file is added to each folder, and when opened, it states that the only solution to regain access to the data is to pay. $1000 ransom In Bitcoin. Fortunately, there are ways to get out without paying a dime.

Hackers use a tactic to encrypt their victims’ files RC4 symmetric encryption algorithm. In other words, the same key that encrypts and decrypts filesIn this particular case, security experts have already found the key in question: 21983453453435435738912738921. Additionally, it turned out that the 10 to 24 hour period specified by the hackers was actually between 10 and 24 hours wrong alarmBecause the malware does not delete the files located on the smartphone in any way. However, it is better to create a copy of the encrypted files before restoration in case the restoration fails.

Be careful, there is also a fake PC version available

The hackers behind the fake Android version of Cyberpunk 2077 have also developed a PC version based on the same principle. But it turns out that more restrictive because unlike the Android version, the encryption key is not in the application itself. In other words, it randomly generated with each infectionThis makes the experts’ job of deciphering the code much more difficult.

More than that $8000 in Bitcoin The cybercriminals have already been paid. There is no guarantee that victims will regain access to their files. There is a chance that the hackers will disappear after receiving the ransom or, worse, escalate the threat given the inconvenience they have caused. Here’s why It is strongly recommended not to pay any ransom demands..

There are also free online tools that can help you decrypt your encrypted files if you download ransomware. No More Ransomwhich is specifically designed to combat such attacks, is one of them. Unfortunately, if a decryption key suitable for your particular situation cannot be found, it may appear on these platforms after a while. Of course, it is important to be careful about files downloaded from the internet first of all.

Source : Kaspersky