The torrent sites are banning CracksNow, which is a popular source of torrent uploads, after discovering that the cracker and keygens loader was distributing ransomware.
CracksNow labeled as "trusted"; this before several users began to notice anomalies in their computers. Torrentfreak shows one of the most recent examples in a screenshot showing the comments to a torrent now removed. According to the thread, the resulting download contained version 5.1 of GandCrab, the latest version of an unpleasant ransomware family. Like any ransomware, GandCrab encrypts users' files and requires a cryptographic rescue in exchange for the keys.
An administrator of the 1337x.to torrent site told the publication: "I banned it myself because I found ransomware in its uploads".
"I also checked the same loads of him on a couple of other torrent sites and got the same results, I immediately alerted his staff about it so they could investigate and take appropriate action, which they did," he said.
Several torrent sites banned the load when listening to the news. Reportedly, 1337x still has some CracksNow uploads in the file, but it assures Torrentfreak that the uploads have been checked for malware and are clean.
"I must admit that it is rare for a reliable charger of this caliber to become a rogue. Normally it's new people who have infected files , " added the 1337x administrator.
As a general rule, torrents are a risky business, especially those that ask you to disable your AV. Always download software from reliable sources and avoid hacked (cracked) executables at all times. Downloading pirated software increases the risk of malware infection.