Goodwill's Ransomware is forcing social work

On the screen of a movie or a movie, it is common for the rich to spend from the illicit or the rich to the low and the poor. Whose reality is absolutely zero? A new type of ransomware attack has recently been discovered in India. The victims are being forced to provide clothes to the homeless, feed the children in reputed restaurants, and provide financial and health care assistance to the needy. This information has been revealed by the digital risk monitoring agency CloudSec. News PTI.

In a warning, the company said Goodwill Ransomware could permanently and temporarily steal the company's information, as well as shut down operations and embezzle money. In March 2022, CloudSec researchers discovered Goodwill Ransomware. According to the report, the group's name suggests that the hackers involved were interested in promoting justice in the community rather than extorting money.

Once Goodwill ransomware enters an individual or organization's system, it encrypts documents, photos, videos, databases, and other important files, and prevents access to them without a decryption code. According to the report, hackers forced victims to perform three social work for decryption codes. The first is to give clothes to the homeless to wear. The second is to feed the five underprivileged children at Pizza Hut, KFC, or any other reputed restaurant and the third is to help those who are not financially well off and are deprived of healthcare. Record videos, photos, and audio of the three activities and share them on social media and operators.

After the three activities, the attackers instructed the victims to write a note on Facebook or Instagram. It is worth mentioning that Goodwill became a victim of ransomware and how they became good people. Once all activities are completed, ransomware operators verify the authenticity of media files and posts uploaded through social media.

After verification, the attacker shares a decryption kit. Where there is a video tutorial on recovering important files by using the original decryption file.