FBI blackmail virus killing tool

The FBI blackmail virus killing tool is a completely free software for killing FBI blackmail. It can effectively detect and kill FBI blackmail virus and repair the mobile phone system problems caused by the virus. Everyone is welcome to download and use it.

How to use

Connect the infected phone to your usual computer, double-click [FBI Blackmail Virus Killer Tool.exe] to run, and follow the instructions to remove the virus from your phone.

Software description

This type of virus induces users to download and install it through pornographic websites. After installation, the virus will force itself to the top and display threatening messages to blackmail users.

1. Virus transmission route

Inducing users to download and install through pornographic websites.

The icon after the program is installed:

2. Overview of malicious behavior

When visiting pornographic websites, users will be induced to download and install the malicious sample. Once installed, duang~, unfortunately, I found that I had been hit by a big trick and my phone became bricked. The malicious virus will force itself to the top. No matter whether you press the HOME button or shut down and restart the computer, it will not work at all. The blackmail and threat messages are always there: false threats are displayed and the user is blackmailed into paying $500 for a MonkeyPak.

3. Detailed analysis

The sample will first add the device manager

Force yourself to the top

Turn on the front camera and take pictures, get the email list of added accounts and mobile phone hardware information

Encrypt the information obtained in the third step, relevant command words, and the entered MoneyPak number and other information and upload them to the server.

Analysis of the sample file found that when the malicious application creator verified that MoneyPak was available, he would set the value of the status item in the server's return information to 77 and save it in the configuration file, and remotely control the virus program to exit.