Turns out it contains Ransomware, Beware of HOAX Game 'Cyberpunk 2077' Mobile Version!

The release of Cyberpunk 2077 in mid-December has brought great enthusiasm around the world. Although the success of the game ended up being less than optimal due to serious technical problems, it is undeniable that the great hype it has managed to build has attracted the attention of many gamers. Including those who use the mobile platform, where it turns out that there are still many who are fooled by the fake game Cyberpunk 2077 Mobile.

So the story is that recently there was a hacker who released Cyberpunk 2077 Mobile on a website similar to the Google Play Store. They managed to disguise a lot of information, including how the game is still available in Beta, developed by CD Projekt Red, and has a download size of over 3GB. Novice or lay gamers will surely be fooled easily, but those who are aware can certainly guess that this is a scam.

️ RC4 algorithm with hardcoded key (in this example – “21983453453435435738912738921”) is used for encryption. That means that if you got your files encrypted by this #ransomware, it is possible to decrypt them without paying the ransom. https://t.co/Lj1hD1SvRK
— Tatyana Shishkova (@sh1shk0va) December 17, 2020

Then what if there are gamers who still download it? First they will realize that the size of the game application is only less than 3MB. If they keep trying to run the game, then this ransomware with the name CoderWave will infect the device and lock all data. The hacker who provided the fake Cyberpunk 2077 Mobile application also threatened to delete all existing data if a ransom of USD 500 was not given within 24 hours.

Threat messages that are visible when running the fake game

Tatyana Shiskova who is a Malware Analyst from Kaspersky explained that files on the device can be restored as before. Shiskova also explained that the threat that infected data could be deleted was just a bluff, because the code embedded in the ransomware did not have such a function. For those who have already been infected with this virus, you can see the guide summarized by Kaspersky HERE.

Cases like this are always a reminder that the internet is never a safe place. Therefore always make sure to access the official and trusted website when you want to download any application.