Reveton ransomware
- First seen
- 2012-01-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:41:55
Context
A ransomware family that targets users from certain countries or regions. It locks the computer and displays a location-specific webpage that covers the desktop and demands that the user pay a fine for the supposed possession of illicit material. The Reveton ransomware is one of the first screen-locking ransomware strains, and it appeared when Bitcoin was still in its infancy, and before it became the cryptocurrency of choice in all ransomware operations. Instead, Reveton operators asked victims to buy GreenDot MoneyPak vouchers, take the code on the voucher and enter it in the Reveton screen locker.
Reports & references
- bleepingcomputer.com — Microsoft Engineer Charged In Reveton Ransomware Case (report)
- Wikipedia — Ransomware (report)
- nakedsecurity.sophos.com — Reveton Ransomware Exposed Explained And Eliminated (report)