FANDOM


Win32.Torrent.A is ransomware that targets µTorrent and BitTorrent users.

Payload

When it runs, the ransomware will search for .torrent extensions, even if they have no comment. It will then display a pretty cliched RIAA, MPAA copyright claim screen, with the .torrent files in the "Files Detected" section, and with some mispelt headings in the window ("Lawsuites" stands out among them). It will ask the user for a license code. The user can simply close the window, and it will supply the user with a standard warning, but can still proceed and remove the software.