Author Archives: Lisa Blanc - Page 33

French is the official language in 29 countries around the world, and millions of people speak it. Jigsaw Ransomware (.fun extension) is targeted at all of those people. It is possible that the threat has a more specific target, but that is unknown at this point. The infection was created to encrypt files, and, unfortunately, it is likely to do that successfully if it gets the chance. What you want to do is strengthen your operating system’s defenses against this malware to keep it away. If you are too late, it is important that you delete Jigsaw Ransomware (.fun extension), but note that that will not restore your files. If they were encrypted, you are screwed. Of course, if backups exist outside the infected PC, you should not suffer any lasting consequences. Once you remove the infection and replace the corrupted files with their backup copies, you will be back to normal. That being said, we hope that you learn from this attack and remember to keep yourself and your system protected at all times. Read more »

Recently we have encountered a lot of Crysis/Dharma Ransomware clones, and in this report, we will discuss one of the latest additions to the family, called Backdata@qq.com Ransomware. It works same as the threats before it, but it uses a slightly different extension to mark its files and there is a new email address for contacting the hackers behind this malicious application. As always, it is said the price depends on how fast the victim puts up with the cybercriminals demands. Same as with other malware alike there are no guarantees the message’s authors will hold on to their end of the bargain. It means you may not get what you pay for and, in the end, you could lose not just your files, but also your money. This is why we recommend not to pay the ransom, and if you do not mean to do so, we encourage you to erase Backdata@qq.com Ransomware. It can be done with a reliable antimalware tool or the instructions available below. Read more »

LockerGoga Ransomware is a malicious application that encrypts almost every single file that is not associated with the operating system. The malware marks data it affects with the .locked extension, which is not particularly unique since other similar threats are using it as well. Later on, it should display a note explaining what has happened and what the victim is supposed to do to receive decryption tools. To be more precise, the hackers ask to pay a ransom. They do not say how much to pay but mention the price could depend on how fast the user contacts them. Anyone who encounters this malicious application or any threat alike should understand it would be unwise to trust cybercriminals. There are no guarantees they will do as promised, and if the victim does not wish to risk losing money in vain, we advise deleting LockerGoga Ransomware. For more information we invite you to read the full article, as for removal instructions, you should take a look at the steps available below. Read more »

Snatch Ransomware does not rename files it enciphers, but it may mark them with .snatch, .FileSlack, or .jupstb extensions. Later on, it ought to drop a ransom note that should be more or less the same no matter which version of the malware you receive. The words in the note claim that the user should not attempt to restore files himself if he does not wish to ruin them completely. Instead, the malware’s developers advise contacting them via email. Of course, we recommend against it, as they will most likely ask you to pay a ransom, and doing so could be hazardous. If you have no intention to risk your savings, we recommend ignoring the ransom note and erasing Snatch Ransomware. The instructions offered below this text will tell you how to remove the malicious application manually. If you are interested, you can also learn more about the threat by reading our full report. Read more »