GX40 is a ransomware-type virus discovered by Lawrence Abrams. Once infiltrated, GX40 encrypts various files and appends associated filenames with the “.encrypted” extension (for example, “sample.jpg” is renamed to “sample.jpg.encrypted“). Following successful encryption, GX40 opens a pop-up window containing a ransom-demand message.