Recently, the National Computer Virus Emergency Response Center and the National Engineering Laboratory for Computer Virus Prevention and Control Technology have relied on the National Computer Virus Collaborative Analysis Platform to discover many cases of Chinese users experiencing “Weaxor” ransomware attacks in China. After important users' files were encrypted, the file names were changed to the original file name+ “.weax” suffix strings. At the same time, the attackers also left an extortion letter on the user's host, demanding that the user contact them and pay a ransom. Information on virus samples related to the retroactive discovery is shown below. The “Weaxor” ransomware virus has multiple versions. Attackers will send corresponding ransomware programs according to the target operating system type, which can cover most Windows and Linux operating system platforms, and poses a great threat to individual users and corporate users. The “Weaxor” ransomware virus leaves ransom letters asking users to contact them to pay a ransom.

Disclaimer:Webull uses external vendor Google Translation Service for news translations where we endeavour to ensure these are correct, however, we recommend that you please double-check this information accordingly. Webull is not responsible for translation errors or issues.