{"id":67097,"date":"2016-12-14T08:58:47","date_gmt":"2016-12-14T16:58:47","guid":{"rendered":"https:\/\/securingtomorrow.mcafee.com\/?p=67097"},"modified":"2025-08-14T07:41:10","modified_gmt":"2025-08-14T14:41:10","slug":"popcorn-time-malware","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/internet-security\/popcorn-time-malware\/","title":{"rendered":"Ransomware Authors Intend to Give Victims a Choice: Infect Friends or Pay Up"},"content":{"rendered":"

 <\/p>\n

The 2002 horror film, The Ring<\/em>, had an interesting play on its genre: socialize the scares \u2014 at least in the confines of the movie. The plot was simple: if you view a cursed VHS tape, you\u2019re doomed to die unless you can pass it onto an unwitting victim. That victim must, in turn, pass it onto another victim. If they don\u2019t, they die. You get the point.<\/p>\n

Unfortunately, a group of cybercriminals have decided to emulate this plot via a ransomware program called \u201cPopcorn Time.\u201d Its premise is simple: if a victim is infected with the Popcorn Time malware, then they must infect two other victims, who each pay the ransom of one bitcoin ($772 USD), to earn a chance at recovering their encrypted data, according to The Guardian<\/a>. Alternatively, victims can pay one bitcoin to recover their encrypted files. Regardless what the victim chooses, the cybercriminals get something they want and the victim\u2019s data gets to\u2014possibly\u2014go on living.<\/p>\n

While the ransomware itself is still in development, it signals an unwelcome tactic capable of complicating ransomware defense. After all, Popcorn Time has a better chance at successfully infecting a targeted computer if a victim chooses to spread the malicious program on their own accord. They are, essentially, participating in the cybercriminal\u2019s phishing attack\u2014a technique that tricks victims into either giving up sensitive information or downloading malicious programs based on authority and trust. It should be noted that propagating malware for the purposes of recovering your own data is, according to Silicon Angle<\/a>, illegal.<\/p>\n

Ransomware is a particularly pernicious type of malicious program, as well. It encrypts the data on a victim\u2019s computer and holds the decryption key hostage until the victim pays the ransom in an allotted amount of time. If the victim doesn\u2019t pay in the desired timeframe \u2014 typically two to three days \u2014 then, usually, the cybercriminal deletes the decryption key, essentially forever locking a user out of their own device. Still, even if the victim does pay the ransom there\u2019s no guarantee the cybercriminal will actually deliver the decryption key. And, even if the key is delivered, there\u2019s still a chance the victim\u2019s device can be re-infected with another strain of ransomware.<\/p>\n

Tips to Stop the Spread of Ransomware<\/h2>\n

So, what can you do to stop the spread of ransomware? Well, here are a few tips:<\/p>\n