Tuesday, May 17, 2016

What is torsona.com?


Torsona.com is one of many Web-to-TOR gateways controlled by cyber crooks who crted the CryptoWall ransomware. They change these gateways quite often for security rsons and because most anti-virus programs block those sites very quickly. Poltornik.com, dogotor.com, torforlove.com just to mention a few of them and cyber crooks keep constantly adding new gateways. Yours might be completely diferrent but if it looks just like the one shown below, it's pretty obvious that your files were encrypted by the CryptoWall virus.

Scammers have previously used TOR organization's Web-to-TOR gateways but most of them were shut down when organization discovered that CryptoWall was utilizing them. New malicious gateways were identified and blocked within a few hours. Cyber crooks had to crte their own gateways if they wanted to stay in business. Unfortunately, CryptoWall payment servers can be rched again which mns they can receive bitcoin payments once again.

Torsona.com itself isn't malicious. It's just a web page with your OS and IP address information as well as instructions on how to pay the ransom. If you were redirected to this web page then your computer is probably infected by CryptoWall virus.

The updated virus also has unique bitcoin payment addresses and more aggressive file encryption and deletion aorithms. To remove this virus from your computer, plse rd this removal guide.

Decrypt service

Your files are encrypted.

To get the to decrypt files you have to pay 500 USD/EUR. If payment is not made before (time/date) the cost of decrypting files will incrse 2 times and will be 1000 USD/EUR.


Written by Michael Kaur, http://deletemalware.blogspot.com

No comments:

Post a Comment