Fortnite players have become the new target of a ransomware that is taking over computers and threatening to delete multiple folders every two hours unless they pay in cryptocurrency. As reported in March, the game has over 250 million users and an online audience of more than 2 million people, making it a very attractive target for hackers.
Open Source Program Hidden-Cry responsible for the attack
Disguised as a cheat for Fortnite, the ransomware claims that players who install it will have better aim and the ability to spot other players. The recently concluded Fortnite World Cup, which had a $50,000 prize pool, may also act as an incentive for hackers.
Cybersecurity firm Cyrensaid, after detailed research, that the malware is actually an open-source program Hidden-Cry with a .Sryk extension.
"We analyzed the sample to understand how it works and perhaps more interesting to mention is that this Syrl ransomware is actually Hidden-Cry with a .Syrk extension," reads a related post on the company's official blog.
Cyren also emphasized that the ransomware will be spread via upload to a sharing website and that the link will be published to Fortnite users on relevant forums.
The Syrk malware, which appears as “SydneyFortniteHacks.exe,” encrypts files on both the hard drive and USB drive of the computer it is installed on. It then demands a ransom from victims for decryption, while the hackers threaten to delete a file every two hours as well as the Document folder if payment is not made immediately.
