Big Head

Big Head is a malicious software (malware) that emerged in May 2023, primarily targeting consumers rather than enterprises due to its relatively low ransom fee. This ransomware was designed to infiltrate systems through suspicious downloads, emails, or websites and encrypt files on compromised machines, disrupting operations and potentially stealing personal information. The malware has multiple variants, notably Big Head ransomware variant A and B, each leaving distinct ransom notes on the infected devices. Variant A has also been observed to leave an alternative note, including the attacker's Bitcoin address for immediate ransom payment. The majority of Big Head ransomware samples were submitted from the United States, indicating a significant impact on users within this region. Interestingly, while variant B did not encrypt any files in our test environment, it was still designed with the capability to do so. Both variants A and B have been known to alter desktop wallpapers and leave ransom notes as part of their attack strategy, further emphasizing their disruptive nature. FortiGuard Labs has developed antivirus signatures to detect known Big Head ransomware variants, enhancing system protection against this threat. Despite the malware's emergence in May 2023, there were no related transactions observed during that period, suggesting that victims may not have paid the demanded ransoms. As the malware continues to evolve, it's crucial for users to maintain up-to-date antivirus software and exercise caution when dealing with suspicious online content.