Merry Christmas
Aliases: Merry X-Mas, MRCR
- First seen
- 2016-12-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:27:44
Targeted industries: government-and-public-sector professional-services technology-and-telecommunications
Targeted regions: country_code:us country_code:it
Context
It’s directed to English and Italian speaking users, therefore is able to infect worldwide. Most attacks are on organizations and servers. It is spread using email spam, fake updates, attachments and so on. It encrypts all your files, including: music, MS Office, Open Office, pictures, videos, shared online files etc.. They pose as a Consumer complaint notification that’s coming from Federal Trade Commission from USA, with an attached file called “complaint.pdf”. Written in Delphi by hacker MicrRP.
Reports & references
- id-ransomware.blogspot.co.il — Mrcr1 Ransomware (report)
- bleepingcomputer.com — Merry Christmas Ransomware Now Steals User Private Data Via Diamondfox Malware (report)
- zdnet.com — Not Such A Merry Christmas The Ransomware That Also Steals User Data (report)
- bleepingcomputer.com — Merry Christmas Ransomware And Its Dev Comodosecurity Not Bringing Holiday Cheer (report)
- decrypter.emsisoft.com — Mrcr (report)