Tox: The first Ransomware-as-a-service is distributed for free. McAfee has apparently revealed a prototype malware (malicious software) that operates as a service! It is the first Ransomware-as-a-service called Tox! What's more, it is distributed for free, simply by registering on the website.
In short, things are simple. TOX:
- It is distributed completely free of charge – all you need to do is register on the site.
- uses TOR and Bitcoin. Combining these two elements it is understandable that there is a degree of anonymity.
- The malware works exactly as it appears.
But how does a Ransomware-as-a-service work?
So let's see how a Ransomware-as-a-service works, and consequently TOX. Immediately after registering on its website, you can create your own malware in three simple steps:
- Enter the ransom amount (note: the website takes a commission of 20% of the ransom you request).
- Type "the reason." According to the website, you should state why you locked the victim's computer (piracy?, browsing adult sites?, possession of pornographic material? something else?)
- Add the captcha characters and
- You are ready!
This process creates an executable file of about 2MB in size which is disguised as a .scr file.
Then, you can start distributing the malware. The Tox website will track your installations and earnings over the TOR network. To receive your earnings, after paying the corresponding commission, you will need a Bitcoin address. The malware will then encrypt all of its victims’ data and demand a ransom.
[alert]Important!! All of this may sound easy and functional, but it seems that the malware lacks complexity and efficiency in its code. The developer probably left many strings that can lead to its detection.[/alert]
