Tyrant ransomware targets users in Iran and is distributed through malicious versions of the popular Psiphon virtual private network (VPN) application. A ransom note written in Farsi provides a contact email address of rastakhiz@protonmail.com and a Telegram username of @Ttyperns. Victims are instructed to pay a ransom equivalent to $15 within 24 hours through one of two local payment processors, exchanging.ir and webmoney724.ir.

  • Bleeping Computer provides additional information on Tyrant here.
  • The NJCCIC is not currently aware of any free decryption tools available for Tyrant.

Image Source: Bleeping Computer