This is a security alert for all TruShield clients and the community as a whole. We have learned of a new update to Shade Ransomware. The update allows for the ransomware to search for the precise file extension and execute upon finding it, and it also downloads additional malware to the system.
About Shade Ransomware
Shade Ransomware is an encryption ransomware and like most ransomware it encrypts a victim’s computer files based on an extension list that has to be matched, and then asks for payment or a ransom to decrypt it. This ransomware affects Russia, Ukraine and Germany. It surfaced in late 2014 to early 2015. At the time it was one of the most widespread encryptors in Russia. It’s being detected as “Trojan-Ransom.Win32.Shade, Trojan.Encoder.858, Ransom:Win32/Troldesh”.