New ransomware variant Jigsaw deletes files as it waits for payment
“A new ransomware program dubbed Jigsaw encrypts users’ files and then begins to progressively delete them until the victim pays the equivalent of $150 in Bitcoin cryptocurrency,” Computerworld reports. Discovered by BleepingComputer.com and disclosed in a blog post, Jigsaw “deletes one file after the first hour has passed and then increases the number of files it deletes in every 60-minute cycle. If no payment has been made within 72 hours, all remaining files will be deleted.” The ransomware threatens to delete files if the user of an infected computer looks to “try something funny.” BleepingComputer.com confirmed that this isn’t an idle threat — Jigsaw automatically delete 1,000 files every time a computer or process is restarted.
Luckily, Jigsaw can be disabled. BleepComputer.com has released a Jigsaw Decrypter tool and offers instructions on how to remove the infection.
Make sure you backup and keep it off site. Not connected to your computer!