Share this article

Emsisoft Releases Bug Fix for Bitcoin-Ransoming Malware WannaCryFake

Software firm Emsisoft released a bug fix for the bitcoin-ransoming malware WannaCryFake.

Updated Sep 13, 2021, 11:29 a.m. Published Sep 25, 2019, 8:35 p.m.
(Shutterstock)
(Shutterstock)

Software firm Emsisoft released a bug fix for the bitcoin-ransoming malware WannaCryFake.

Announced today in a blog post, the free software will help recover encrypted files without leading to data loss.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters

Unlike real crypto-mining exploits, ransomware is dependent on extortion to reap a reward. Ransomware attacks increased 118 percent in 2019, equaling 504 new threats per minute, in the first quarter, according to a McAfee report.

WannaCryFake is a variant of the infamous WannaCry ransomware that targeted Microsoft computers in 2017. It locks victims’ files using AES-256, or the advanced encryption standard.

An infected victim will receive a message that says:

“You have to pay for decryption in bitcoins. The price depends on how fast you write to us. After payment we will send you the tool that will decrypt all your files.”

Victims are instructed to contact the ransomware distributors through ProtonMail or Telegram, and are then provided steps on how to send bitcoin through Pidgin.

Though the virus suggests LocalBitcoin’s as the “easiest way to buy bitcoin,” it also sources CoinDesk’s beginners' guide to bitcoin for users unfamiliar with the digital currency.

The malware also warns, “Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.”

Once downloaded, the Emsisoft Decryptor uses the encrypted file and the original unencrypted version to piece together the keys needed to decrypt locked data. Because the protocol uses filename extensions to determine the encryption parameters, users are instructed not to rename their files.

Emsisoft’s software allows users to keep a record of the decryption process by using the Save Log button.

In addition to an increase in bitcoin ransoming malware, crypto-jacking scams are up 29 percent in the first half of 2019, despite the difficulty in mining due to bitcoin’s increasing hash rate.

Hacker photo via Shutterstock

More For You

KuCoin Hits Record Market Share as 2025 Volumes Outpace Crypto Market

16:9 Image

KuCoin captured a record share of centralised exchange volume in 2025, with more than $1.25tn traded as its volumes grew faster than the wider crypto market.

What to know:

  • KuCoin recorded over $1.25 trillion in total trading volume in 2025, equivalent to an average of roughly $114 billion per month, marking its strongest year on record.
  • This performance translated into an all-time high share of centralised exchange volume, as KuCoin’s activity expanded faster than aggregate CEX volumes, which slowed during periods of lower market volatility.
  • Spot and derivatives volumes were evenly split, each exceeding $500 billion for the year, signalling broad-based usage rather than reliance on a single product line.
  • Altcoins accounted for the majority of trading activity, reinforcing KuCoin’s role as a primary liquidity venue beyond BTC and ETH at a time when majors saw more muted turnover.
  • Even as overall crypto volumes softened mid-year, KuCoin maintained elevated baseline activity, indicating structurally higher user engagement rather than short-lived volume spikes.

More For You

Cathie Wood’s ARK Invest files for two crypto index ETFs tied to CoinDesk 20

Ark Invest CEO Cathie Wood

One proposed fund will attempt to exactly mimic the CoinDesk 20, but the other would track the index, excluding bitcoin.

What to know:

  • ARK Invest has filed with U.S. regulators to launch two cryptocurrency ETFs tracking the CoinDesk 20 index.
  • One proposed fund would track the CoinDesk 20, which provides exposure to major tokens, including bitcoin, ether, solana, XRP, and cardano. The other would track the same index, but exclude bitcoin, by pairing long index futures with short bitcoin futures.
  • The funds, which would list on NYSE Arca if approved, aim to offer diversified crypto exposure without direct token custody and follow similar, still-unapproved crypto index ETF proposals from WisdomTree and ProShares.