CTB-Faker Ransomware Uses WinRAR to Lock Data in Password-Protected ZIP Files

A ransomware family called CTB-Faker tries to pass as a more famous variant called CTB-Locker, and lies to users about using strong encryption when it actually does nothing more than to move all the users' data inside password-protected ZIP archives.

The good news is that this ransomware is decryptable, albeit via a complicated process for which regular users need to request assistance.

The second good news is that Lawrence Abrams of Bleeping Computer has volunteered to assist users with the decryption process for free.

CTB-Faker spread via adult websites

According to technical analysis from Bleeping Computer and Check Point, CTB-Faker is currently distributed via adult websites promoting private striptease dance videos.

Users are enc...