Don’t let your computer be held for ransom.
A virus known as the Canadian Security Intelligence Service (CSIS) virus can lock your computer and demand payment. Please be sure not to fall prey to this scam.
Infected computers show a pop-up warning message (see image at bottom) that may claim to come from the RCMP, CSIS, or other government agencies and that may also display logos and other graphics that are authentic in appearance. In some cases, the computer’s webcam may be activated.
The pop-up message warns that the computer has been associated with child pornography, illegal music downloading, or other illegal activity and states that the user must pay a fine via Ukash (a payment service provider) so their computer can be “unlocked.”
These messages are scams and evidence that your computer has been compromised by malicious software known as “ransomware” or “scareware.”
Ransomware restricts access to a computer system that it has infected and demands a ransom be paid, claiming that will remove the restriction.
If you receive one of these messages, please do NOT send money. Instead, you will need to remove the virus.
If you need assistance, please contact the ICT Help Desk. If appropriate, the Help Desk may refer you to the ICT Laptop Clinic which provides a variety of services from tune-ups to malware removal and from upgrades to full system rebuilds.
To guard against this virus and all forms of malicious software (malware), please ensure your anti-virus software is up to date and apply security updates and patches regularly. Please visit ICT Security for further information on keeping your computer safe.
Additional information on ransomware can be found on the Canadian Anti-Fraud Centre website and on the RCMP website.
You may also wish to review the RCMP’s “Top 10 Cyber Crime Prevention Tips”
ICT always encourages users to report problems and seek support from the ICT Help Desk: 966-4817, help.desk@usask.ca
Sample of possible CSIS Ransomware virus warning message:
