While other types of ransomware may not be as difficult to remove , Browlock, which blocks browsers in an attempt to trick users into paying a fine, can help cybercriminals make a lot of money. Researchers from F-Secure say the threat is now targeting users from Russia.
When victims visit a website containing Browlock, they are presented with a “locked page” informing them that they must pay 1,000 rubles ($27/€20), or they may be imprisoned for accessing illegal content on the Internet.
The message appears to come from the Russian Ministry of Internal Affairs and tells victims that they must make the payment within 12 hours. Once made, they will receive a code that unlocks the browser.
When users try to close the tab, the following error message appears:
"Your browser will be blocked for security reasons. All information about your computer has been captured. All your files have been encrypted."
The message appears several times on the screen. Experts say that this is actually a large dialog box. It has an OK button, but users cannot see it because it is off-screen. However, if you press the ENTER key, the notification disappears and you can continue browsing.
F-Secure expert testing shows that browser lock only works on Chrome.
