SonicAlert: desuCrypt variant named InsaneCrypt spotted in the wild (Feb. 9, 2018)

The Sonicwall Capture Labs Threats Research team have come across a variant of the DesuCrypt ransomware called InsaneCrypt.  This variant uses RC4 encryption and encrypts files immediately upon execution.  Unlike earlier ransomware, there are no threatening countdown timers and ransom payments amounts immediately presented to the victim.  Instead, as is the growing trend with most ransomware today, the victim must communicate with the operator via email for further instructions.

Detected as:

• InsaneCrypt.RSM
• InsaneCrypt.RSM_2
• BTCWare.RSM_4

Full details about this SonicAlert can be found on our Security Center.