Prince Rupert RCMP are urging businesses to be extra vigilant following a scam that cost one business several of its electronic records and files.
The business received an email near the end of March with an attachment entitled “Resume Douglas Chandler.zip”. When it was opened, the file released a virus onto the system. As a result, this virus infected all of the company’s databases causing all files to be encrypted. The complainant then received a file titled “HELP_DECRYPT” which directed the user to a personal Internet site that was hosted by an anonymous network explaining how the user could decrypt their files for a fee of $500 USD which was to be paid in “Bitcoins” (a decentralized digital currency) by March 31, 2015. In the event the fee was not paid within the specified timeframe, the cost to decrypt the files would double every 160 hours. As this appeared to be some form of Internet scam the complainant contacted police.
Prince Rupert RCMP called in experts from the Integrated Technological Crime Unit, but they determined that none of the files could be decrypted or accessed. As well, there was no way the virus, which was identified as “CryptoWall 3.0” by the Microsoft Malware Protection Centre, could be removed from the system.
“As this virus appears to be very sophisticated and attacks computer databases the Prince Rupert RCMP want to warn the community of this incident,” said Const. Matt Ericson of the Prince Rupert RCMP.
“In the event any community members or companies encounter similar circumstances pertaining to their computers we are asking users not to open the email or any associated programs, and to contact police.”
The Prince Rupert RCMP is asking anyone that may have information regarding this incident or any similar incidents to contact the Prince Rupert RCMP Detachment at 250-627-0700 or Crime Stoppers at 1-800-222-TIPS (8477).
