Hackers are trying to trick video game enthusiasts with a fake beta version of Cyberpunk 2077 for Android devices. This fake version is actually ransomware. But fortunately, the decryption key was revealed by Kaspersky.
Cyberpunk 2077 is still talking about him. This time against his will.
For those unfamiliar with the Cyberpunk 2077 saga, this is a video game launched in December 2020 that caused quite a stir. A lot of noise!
Awaited for nearly a decade by video game enthusiasts, Cyberpunk 2077’s launch turned out to be a monumental fiasco, when the game was ultra buggy, if not downright unplayable, on some platforms.
The game was released to the press and developer CD Projeckt RED was rightly accused of hiding images from the PS4 and Xbox One versions that were far from the promo videos. In short, a whole saga which saw Sony withdraw the game from its online catalog.
Still, the game remains immensely popular, and hackers have sensed the bargain by trying to use the hype to trick people into an infected version of ransomware.
A fake Play Store page to download Cyberpunk 2077
It’s the antivirus company Kaspersky who unveiled this fake version of Cyberpunk 2077 that circulates on the web.
The pirates have thus created a false web address in the name of the game. Once you land on the page, you come across a presentation like the Play Store on Android.
This is what the fake Cyberpunk Android beta page looks like. Photo credit: Kaspersky.
It explains that a free beta version of the game on Android is available, then we are invited to download it.
Fake comments have been added suggesting that this version is really great and all the hoopla.
Although it says that the “game” weighs 3.4 GB, in reality if we make the mistake of downloading it we realize that the file weighs only 3MB.
The application then asks us to access our files, which on board is not strange since a game may want to have access to make backups.
Only, you will understand, it is rather to lock our phone and demand a ransom of $ 500 in bitcoin in order to unlock the device. If after 10 or 24 hours we have not complied, the content will be deleted.
Kaspersky decrypts ransomware
As Kaspersky explains it in his blog, the antivirus company was able to decrypt the access key that allows us to recover all our files.
Using an RC4 decryption service just enter the code: 21983453453435435738912738921.
You can also use the Kaspersky solution to get rid of it.
In short, a bit of shoddy work by the pirates.
However, Kaspersky also states that another infected version of the game, for PC this time, is also circulating on the web.
The difference in this case is that the key to unlock the content is not hard-encrypted, but rather randomly generated for each infection. In short, a different code for each infection.
If you are a lover of video games or your children are, avoid all non-credible sites promoting the game.
On an Android device, the only way to play Cyberpunk 2077 is using the Google Stadia service. On a computer, go through a certified online store like Steam or the Epic Store.
Having an antivirus is also obviously a good way to identify and block ransomware threats of this kind.
Our 2021 antivirus and protection suites choices
Protect all your devices from viruses with Kaspersky Total Security
The best antivirus for Apple Android and iOS phones and tablets