RansomHouse Levels Up: Alarming ‘Mario’ Encryptor Tightens Grip on Victims
RansomHouse ransomware-as-a-service has leveled up its game with the new ‘Mario’ encryptor. By switching from simple to complex encryption techniques, it boosts speed and reliability, making life harder for the good guys. With its dynamic chunk sizing and intricate math, it’s not just a name; it’s-a me, Mario!

Hot Take:
It’s official: RansomHouse just went from a one-trick pony to a full-blown circus act with their latest encryptor upgrade, ‘Mario’. They’re serving up chaos on a platter with a side of math-induced headaches for cybersecurity experts. Is there a cybersecurity Mario Kart tournament happening that we didn’t know about?
Key Points:
- RansomHouse has upgraded its encryptor to a more complex, multi-layered technique called ‘Mario’.
- The new encryptor uses a two-stage transformation with dual keys, making decryption tougher.
- The encryptor now employs dynamic chunk sizing and intermittent encryption for files over 8GB.
- ‘Mario’ targets virtual machine files, renaming them with the ‘.emario’ extension and leaving ransom notes.
- Unit 42 calls this development “alarming” and signals a shift towards more efficient and evasive ransomware tactics.
Already a member? Log in here
