PEWDIEPIE RANSOMWARE

TL;DR

PewDiePie and T-Series are in a heated competition for the top YouTube channel spot, leading to the creation of a ransomware that encrypts files until PewDiePie hits 100 million subscribers.

Transcript

woohoo more ransomware that's always exciting this time it's pewdiepie that's to blame or t-series i think it's t-series to blame because they're the ones catching up in terms of sub-count for those who are not citizens of the internet there is a really big crisis in the world right now no it's not the one in syria it's not brexit it's the fact tha... Read More

Key Insights

• 🥺 PewDiePie's battle with T-Series has led to the creation of the PewCrypt ransomware, which exploits the competitive sub count.
• 🔄 Hackers, including allies of PewDiePie, have actively campaigned to increase PewDiePie's subscriber count through various means, including ransomware.
• 👨‍💻 PewCrypt ransomware is unique as it is written in Java, adding a layer of obfuscation to its code, making it difficult to detect by conventional means.
• 🤨 The ransomware threatens to permanently delete files if T-Series surpasses PewDiePie in subscribers, raising concerns about the potential loss of valuable data.
• 🧑‍🏭 PewCrypt's simplicity and the popularity of the PewDiePie vs T-Series battle make it an attractive tool for malicious actors to modify and distribute.
• 😚 The potential for accidental infections and the distribution of modified versions of PewCrypt puts users at risk of losing their files if appropriate precautions are not taken.
• 🕵️ The limited detection of PewCrypt by antivirus software highlights the need for constant updates and improved methods in detecting emerging ransomware threats.

Questions & Answers

Q: How does PewCrypt ransomware work?

PewCrypt ransomware encrypts files on infected systems using AES256. It demands the victim to subscribe to PewDiePie until he reaches 100 million subscribers, with the promise of a decryption tool release. If T-Series wins, the private key will be deleted, making file recovery impossible.

Q: Are there any risks associated with PewCrypt ransomware?

Yes, there are risks. The ransomware, although initially not intended to be malicious, can be modified by malicious actors who may distribute it through malicious attack vectors. Accidental infections could also occur, leading to potential permanent loss of files.

Q: How does the ransomware affect files?

When infected with PewCrypt ransomware, files become encrypted and unreadable. Attempts to open files result in corrupted data, rendering them inaccessible until the files are decrypted.

Q: Can the PewCrypt ransomware be detected by antivirus software?

Currently, only two antivirus engines have flagged PewCrypt. However, manual intervention appears to have influenced these detections, pointing to potential evasive techniques employed by the ransomware.

Summary & Key Takeaways

• PewDiePie, the biggest YouTube channel, is at risk of losing its position to T-Series, a corporate entity, sparking a frenzy among PewDiePie's allies, including hackers.

• Ransomware called PewCrypt has been created to force people to subscribe to PewDiePie. It encrypts files and requests subscribers until PewDiePie reaches 100 million subs, with a threat of permanent deletion if T-Series wins.

• The ransomware, written in Java, is a potential threat as it can be easily modified and maliciously distributed, putting systems at risk of infection.