Security News > 2020 > December > Ransomware masquerades as mobile version of Cyberpunk 2077
2020-12-17 14:01
A threat actor is distributing fake Windows and Android installers for the Cyberpunk 2077 game that is installing a ransomware calling itself CoderWare.
This week, Kaspersky malware analyst Tatyana Shishkova discovered an Android ransomware masquerading as a mobile version of the Cyberpunk 2077 game.
You can see the hardcoded key '21983453453435435738912738921' in the ransomware source code shown below.
This ransomware is the same as one discovered by MalwareHunterTeam in November that was disguised as a Windows Cyberpunk 2077 installer.
Like the Android version, this ransomware calls itself CoderWare but is a variant of the BlackKingdom ransomware.