A new Ransomware-as-a-Service (RaaS) named ‘Jokeroo’ is being promoted on the underground hacking forums and via Twitter.
What is a RaaS - A Ransomware-as-a-Service allows cybercriminals and would-be hackers to gain access to ransomware and distribute the ransomware by signing up to the service where the service provider offers ransomware and a payment server.
The member will distribute the ransomware to infect victims and get ransom payments from the victims. The payment amount is then shared by the member and the service provider.
GandCrab Ransomware RaaS to Jokeroo RaaS
A security researcher named Damian noted that Jokeroo RaaS was first promoted as GandCrab Ransomware RaaS in underground hacking forum Exploit.in. Later, another security researcher named David Montenegro tweeted that the GandCrab Ransomware Rass name has been changed to ‘Jokeroo’.
Since then, the service providers have been promoting their service ‘Jokeroo RaaS’ via Twitter.
Jokeroo RaaS has been offered in multiple membership packages ranging from $90 to $300 and $600. In the basic package, a member earns 85% of the ransom payments. As members go up the package ladder, they get extra benefits such as Salsa20 encryption, different ransomware variants, and different payment cryptocurrency options.
The basic $90 slab package offers the following benefits: