Kaspersky Lab reports that a blocker has been discovered that encrypts files associated with twenty different online games.
When encrypting files, the new blocker operates with a list of more than 50 different file extensions. In addition to files associated with video games, it also searches for images, documents, iTunes files, and so on. However, its main focus is on popular single-player games such as Call of Duty, Minecraft, Half-Life 2, Elder Scrolls, Skyrim, Assassin’s Creed, online games like World of Warcraft, Day Z, and League of Legends, as well as a number of games released by EA Sports, Valve, and Bethesda. It appears that the Steam Community is also among its potential targets.
Researchers at Bromium discovered a website distributing the new malware, which they identified as a variant of CryptoLocker... it uses a banner to inform the victim that their files have been encrypted and demands a ransom in Bitcoin. If the specified website for paying for the decryption key does not work, the user is offered to go to Tor.
According to experts, some files encrypted by this malware cannot be recovered; this category includes user profile data, saved games, their schemes, and modifications.