{"id":13948,"date":"2017-02-01T09:00:56","date_gmt":"2017-02-01T14:00:56","guid":{"rendered":"https:\/\/www.kaspersky.com.au\/blog\/?p=13948"},"modified":"2019-11-15T22:45:34","modified_gmt":"2019-11-15T11:45:34","slug":"netix-ransomware","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com.au\/blog\/netix-ransomware\/13948\/","title":{"rendered":"Fake Netflix app is actually ransomware"},"content":{"rendered":"

People are downloading a new app, looking to get free access to Netflix accounts. What they\u2019re actually getting is a malware strain<\/a> called Netix that encrypts users\u2019 data and demands $100 in bitcoins to unlock their files.<\/p>\n

The program, called \u201cNetflix Login Generator\u201d is downloaded by users looking to gain access to Netflix without paying. The app purportedly has leaked Netflix accounts, which users can use to access the streaming service for free. In reality, all it does is provide fake account credentials that don\u2019t work.<\/p>\n

Once installed, the app shows you what looks like a login-password pair generator, but that\u2019s just a distraction; it\u2019s actually busy encrypting your data. Once it\u2019s finished with that, up pops a ransom note.<\/p>\n

Silver lining<\/h2>\n

Losing access to your personal photos, videos, and documents is terrible, but there is one small bit of good news: The current version of the app (version 1.1) encrypts only certain file types (see below), and it also targets only the C:\/user directory. Other types of ransomware<\/a> can be much more thorough when encrypting.<\/p>\n


\n.ai, .asp, .aspx, .avi, .bmp, .csv, .doc, .docx, .epub, .flp, .flv, .gif, .html, .itdb, .itl, .jpg, .m4a, .mdb, .mkv, .mp3, .mp4, .mpeg, .odt, .pdf, .php, .png, .ppt, .pptx, .psd, .py, .rar, .sql, .txt, .wma, .wmv, .xls, .xlsx, .xml, .zip
\n<\/code><\/p>\n

Also, in an odd twist, this malware affects users running Windows 7 and 10 only; users running XP and Windows 8 shouldn\u2019t be affected (yet).<\/p>\n

That\u2019s not to say the authors won\u2019t update the malicious app in the future, but for now, if you are infected and your files are backed up on a separate, external drive, you shouldn\u2019t have to worry too much.<\/p>\n

The moral of the story<\/h3>\n

Like all such stories, this one comes with a few life lessons. First, if something sounds too good to be true (e.g., free access to Netflix), it probably is. Second, make regular backups of your precious data. Last but certainly not least, install antivirus<\/a> protection \u2014 with ours, the first 30 days are free.
\n<\/p>\n","protected":false},"excerpt":{"rendered":"

Downloaded a program called Netflix Login Generator? Delete it immediately!<\/p>\n","protected":false},"author":437,"featured_media":13949,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[5,2646],"tags":[109,586,36,1335,1924,420],"class_list":{"0":"post-13948","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-news","8":"category-threats","9":"tag-apps","10":"tag-backup","11":"tag-malware-2","12":"tag-netflix","13":"tag-netix","14":"tag-ransomware"},"hreflang":[{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/netix-ransomware\/13948\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/netix-ransomware\/5922\/"},{"hreflang":"ar","url":"https:\/\/me.kaspersky.com\/blog\/netix-ransomware\/4105\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/netix-ransomware\/10766\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/netix-ransomware\/8868\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/netix-ransomware\/9982\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/netix-ransomware\/9728\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/netix-ransomware\/13948\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/netix-ransomware\/6654\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/netix-ransomware\/7115\/"},{"hreflang":"pl","url":"https:\/\/plblog.kaspersky.com\/netix-ransomware\/6130\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/netix-ransomware\/9687\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/netix-ransomware\/13917\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/netix-ransomware\/13948\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com.au\/blog\/tag\/ransomware\/","name":"Ransomware"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/posts\/13948","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/users\/437"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/comments?post=13948"}],"version-history":[{"count":5,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/posts\/13948\/revisions"}],"predecessor-version":[{"id":24337,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/posts\/13948\/revisions\/24337"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/media\/13949"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/media?parent=13948"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/categories?post=13948"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/tags?post=13948"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}