{
	"id": "6d5f41fb-715f-43cf-87db-753b5eb87a32",
	"created_at": "2026-04-06T00:09:18.805318Z",
	"updated_at": "2026-04-10T03:21:29.896868Z",
	"deleted_at": null,
	"sha1_hash": "f08241148732a96283661cec0dce24e53a72e659",
	"title": "NRansom: Ransomware that demands your nudes",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 308086,
	"plain_text": "NRansom: Ransomware that demands your nudes\r\nBy John Snow\r\nPublished: 2017-09-22 · Archived: 2026-04-05 18:22:55 UTC\r\n Ransomware\r\nA new blocker called nRansom locks users out of their computers and demands not money, but nude pictures.\r\nSeptember 22, 2017\r\nRansomware has been called the scourge of the Internet for quite a while. It’s really one of the twenty-first\r\ncentury’s main cyberthreats, and recently it has taken … quite a turn. Researchers from MalwareHunterTeam have\r\ndiscovered a new strain of ransomware, called nRansom, that blocks victims’ computers, but instead of requiring\r\nmoney to unlock the computer, it demands nude photos.\r\nThis ransomware seems to be not a cryptor, but rather a blocker, which means that in case of infection it doesn’t\r\nencrypt your files, but simply blocks access to your computer. The ransom note that appears on the screen informs\r\nvictims that the only way to get back access to their computers is to send the aforementioned pictures: ten of them,\r\nnude, and demonstrably of the victims.\r\nThey state that they will somehow verify those nudes really belong to the victim before sending the code that\r\nunlocks the computer.\r\nhttps://www.kaspersky.com/blog/nransom-nude-ransomware/18597/\r\nPage 1 of 2\n\nhttps://twitter.com/malwrhunterteam/status/910952333084971008\r\nAt this point, nRansom has been seen only as a file called nRansom.exe, which means it affects only Windows\r\nusers.\r\nWe can only speculate on what the criminals are planning to do with any photos they manage to get. They’ll\r\nprobably use the pictures to shame the victims and extort either more nudes or money.\r\nAs always, we advise you not to pay the ransom if your computer gets infected. The word “pay” in this case is as\r\nlegitimate as in any other; private information is no less payment than money.\r\nKaspersky Internet Security detects nRansom as Trojan-Ransom.MSIL.Agent.zz and neutralizes it right away. In\r\ncase the blocker has somehow sneaked onto your PC, you can unblock the computer by pressing Ctrl + Alt + Shift\r\n+ F4 simultaneously. It’s necessary to run a full scan of your system after that. You can read more about that here.\r\nThat technique is available in all of our flagship security solutions, and it works against all blockers, in case they\r\nsomehow get onto your computer. However, if you always keep protection running, that scenario is highly\r\nunlikely; Kaspersky Internet Security neutralizes almost all ransomware species before they can do anything at all,\r\nand any that manage to sneak in under the radar are detected by System Watcher when they attempt to do anything\r\nmalicious.\r\nTips\r\nSource: https://www.kaspersky.com/blog/nransom-nude-ransomware/18597/\r\nhttps://www.kaspersky.com/blog/nransom-nude-ransomware/18597/\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia"
	],
	"references": [
		"https://www.kaspersky.com/blog/nransom-nude-ransomware/18597/"
	],
	"report_names": [
		"18597"
	],
	"threat_actors": [],
	"ts_created_at": 1775434158,
	"ts_updated_at": 1775791289,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/f08241148732a96283661cec0dce24e53a72e659.pdf",
		"text": "https://archive.orkl.eu/f08241148732a96283661cec0dce24e53a72e659.txt",
		"img": "https://archive.orkl.eu/f08241148732a96283661cec0dce24e53a72e659.jpg"
	}
}