New Bart Ransomware Arrives in ZIP File

New Bart Ransomware Arrives in ZIP File

In this publicity image released by Fox, Bart Simpson, an animated character from "The Simpsons," is shown during the opening sequence of the "MoneyBart" episode, which aired on Sunday, Oct, 10, 2010. (AP Photo/Fox)

A new ransomware virus arrives as a ZIP file attached to email.  The ZIP file has an javascript file which, when run, will encrypt files on your hard drive and network drives.  The ZIP file attachment will has one of the following or similar names:

  • photo.zip or photos.zip
  • image.zip or images.zip
  • picture.zip or pictures.zip

Inside the ZIP file is a javascript file called "PDF_123456789.js" which is a javascript that will encrypt your files.  The ransom demaind for decrypting files is about $2000.

User Action to Take

As always, be very suspicious of any email attachment you receive.  Do not open any attachment you were not expecting regardless if it from someone you know or not.

If you open the ZIP attachment inadvertently, do not open the any file inside.

Details about the Bart ransomware can be found here.