Navigation and service

TeslaCrypt

Name of Malware: TeslaCrypt

warning triangle yellow

Type of Malware: Ransomware

Affected Operating Systems: Windows

Affected Device Types: PCs, laptops

Impact: low

What is TeslaCrypt?

TeslaCrypt is a ransomware trojan.

Ransomware trojans encrypt parts of the data on your hard drive and then demand payment to unlock this data.

How did I get infected with TeslaCrypt?

One potential route of infection is via another piece of malware, i.e. a malware downloader, that was already on your system. Andromeda/Gamarue and Matsnu are examples of malware downloaders.

What do I have to do now?

Do not carry out any further sensitive transactions on your computer. There may be other malware on your system besides TeslaCrypt. Use anti-virus software to perform a full scan of your system. If you still have concerns about whether the infection has been effectively removed, you should reset the device and reinstall the operating system. Back up your personal data before wiping the system. Once your system has been reset, change all your passwords, as the perpetrators may have been able to access them. If you use Online banking, contact your bank so that they can implement the appropriate security safeguards. The Europol project "No More Ransom" has created a TeslaCrypt decryption tool.