Tyrant ransomware targets users in Iran and is distributed through malicious versions of the popular Psiphon virtual private network (VPN) application. A ransom note written in Farsi provides a contact email address of firstname.lastname@example.org and a Telegram username of @Ttyperns. Victims are instructed to pay a ransom equivalent to $15 within 24 hours through one of two local payment processors, exchanging.ir and webmoney724.ir.
- Bleeping Computer provides additional information on Tyrant here.
- The NJCCIC is not currently aware of any free decryption tools available for Tyrant.
Image Source: Bleeping Computer