NitroRansomware is a Windows ransomware strain from April 2021 that asks for a Discord Nitro gift code instead of cryptocurrency. It spreads as a fake tool claiming to generate free Nitro codes. Encrypted files get the .givemenitro extension, the wallpaper changes to an angry Discord logo, and a full-screen window demands a gift code within three hours. No ransom note file is dropped. It hits individual Windows users. Besides encrypting, it steals Discord tokens and browser data and can run commands sent through a Discord channel. The key is static and stored inside the program, so files can be recovered by extracting it.
Sources: In-house research
Decryptor: Decryptor availability has not been recorded.
Dealing with an active incident? Our incident response team is available 24/7.
Emergency response: +1 (877) 364-5161