Updated Dec.14,2007 10:36 KST

Beware of Ransomware, PC Users Told
Korean PC users have been warned of malware that encrypts data belonging to an individual on a computer and demands a ransom to restore it. IT security firm Ahnlab said Thursday a growing number of victims were reporting ransomware that hijacks their video files and demands payment in exchange for their restoration. The ransomware encrypts files on the victim's computer which the victim is then unable to open without the correct decryption key. Only when the ransom demanded is paid is the victim given the decryption key.

The ransomware was included in adware ˇ°Uccplay.ˇ± Victims are led into thinking the adware is a multimedia player, but when they install it, the program copies all video files stored on the computer to a hidden folder and removes the original files. Victims have no choice but to open the ransomware to access their video files, which then opens up a ˇ°certificationˇ± box that actually links to mobile phone payment.

Deleting the malware is difficult, and ordinary PC users are likely to have to pay up. Ahnlab said the malware is mainly installed by ActiveX. When an ActiveX warning message pops up, users should take extra caution and check the message thoroughly. Setting the Internet Explorer security level to above medium can help prevent automatic installation of malware, it added.

(englishnews@chosun.com )