Although it started as a joke, the PewCrypt ransomware has taken on a nasty dimension. Fans of popular YouTuber PewDiePie have started using extreme methods to ensure their idol's channel reaches 100 million subscribers as soon as possible.
Their latest action involves a ransomware that locks users' files indefinitely until PewDiePie gains 100 million subscribers.
Known as PewCrypt, the Java-based ransomware encrypts users' files and will be recoverable at the discretion of its creators. Also known as PewDiePie ransomware, it is poorly written and is a modified version of ShellLocker ransomware.
It should be noted that another PewDiePie-themed ransomware strain that appeared last December locked files without any recovery method, resulting in them being lost forever.
PewCrypt encrypts files correctly, but you can't buy the decryption key.
Instead, victims must wait until PewDiePie gains over 100 million followers before they are allowed to decrypt any of the compromised files.
Given that PewDiePie currently has 90 million subscribers, it's likely to be a long wait for victims. What's worse is that PewCrypt is also threatening to delete the user's encryption key forever, should T-series reach 100 million first.
Fortunately, the author of PewCrypt realized the consequences if a victim filed a complaint with the authorities. He released the ransomware's source code on GitHub and the command-line-based decryption tool.
Meanwhile, the Emsisoft team had already launched a decryptor application for PewCrypt. So, in case your files are affected by the ransomware, there is an easy way to restore them before PewDiePie reaches 100 million subscribers.
