Rensenware (; stylized as rensenWare) is a ransomware that infects Windows computers. It was created as a joke by Kangjun Heo (; alias "0x00000FF") and first appeared in 2017. Rensenware is unusual as an example of ransomware in that it does not request the user pay the creator of the virus to decrypt their files, instead requiring the user to achieve a required number of points in the shoot 'em up video game Undefined Fantastic Object before any decryption can take place. The main window displays Minamitsu Murasa, a character from the game. Heo released a patch that neutralizes Rensenware aft
rensenWare rensenWare(蓮船ウェアー, 련선웨어) is a ransomware. It does not demand victims for any money, but makes them play a Touhou Project game. It unlocks encrypted files when player scores over 200 million. This repository does not contain the entire source code, but the core part is archived to explain what I wanted to do with this. Warning The initial build of rensenWare (also initial release of source code) does not handle exceptions properly, so it can be terminated unexpectedly and may results permanent data loss.
Excerpt from the source-code README · 1,788 chars · not written by Vinony
via Wikidata · CC0
~2 min read
Rensenware (; stylized as rensenWare) is a ransomware that infects Windows computers. It was created as a joke by Kangjun Heo (; alias "0x00000FF") and first appeared in 2017. Rensenware is unusual as an example of ransomware in that it does not request the user pay the creator of the virus to decrypt their files, instead requiring the user to achieve a required number of points in the shoot 'em up video game Undefined Fantastic Object before any decryption can take place. The main window displays Minamitsu Murasa, a character from the game. Heo released a patch that neutralizes Rensenware after the malware gained attention.
== Description == Rensenware was developed by Korean undergraduate student and programmer Kangjun Heo for Windows operating systems out of boredom as a joke within the Touhou Project fandom. When executed, the program scans and encrypts files on the computer ending in specific extensions using AES-256 and appends ".RENSENWARE" to the filename. The ransomware was first discovered by MalwareHunterTeam on April 6, 2017.
Discovered by embedding cosine similarity (sentence-transformers MiniLM, 384-dim).