Cerber the Talking Ransomware...

Cerber the Talking Ransomware.

After encrypting all files it Announces / Reads the Ransom note through the users Speaker or Headphones.

“Attention! Attention! Attention!”
“Your documents, photos, databases and other important files have been encrypted!”

Along with the usual HTML Ransom note, in this case "# DECRYPT MY FILES #.html", it also keeps a .vbs file "# DECRYPT MY FILES #.vbs"

speech-vbs

Inside this Visual Basic Script (.vbs) file is the code for the Speaking Announcement. It uses the standard windows Speak Api : SAPI.SpVoice SAPI.Speak  "Attention! Attention! Attention!!