MalwareTips / The library

Ransomware

Ransomware encrypts files and demands payment for a decryption key, often threatening data loss or public exposure.

About this category

Quick response matters. This category explains common infection methods, immediate steps to take after an attack, and recovery options such as backups, system cleanup, and incident hardening to reduce future risk.

More from the archive

RDAT EXPOSED: .RDAT Files, DAT_INFO.txt, and @returndat

GAGAKICK EXPOSED: .GAGAKICK Files, README.TXT, and ambulafixdata@zohomail.eu

Bitrix EXPOSED: .bitrix Files, a Pop-Up Note, and Bitrix@proton.me

Warlock Group EXPOSED: .x2anylock Files, How to decrypt my data.txt, and a qTox Inbox

NoBackups EXPOSED: .nobackups Files, README.TXT, and nobackups@mailum.com

Cephalus EXPOSED: .sss Files, recover.txt, and sadklajsdioqw@proton.me

LockBeast EXPOSED: .lockbeast Files, README.TXT, and a Session Inbox

Vile EXPOSED: .vile Files, VILE_README.txt, and a 14-Day Leak Clock

MORTAR EXPOSED: Victim-ID Extensions, README-[ID].txt, and a Tor Login

KRYBIT EXPOSED: .KRYBIT Files, RECOVER-README.txt, and a Tor Leak Site

Gines EXPOSED: .gines Files, +README-WARNING+.txt, and ginesomna@outlook.com

Exitium EXPOSED: .exitium Files, YOU ARE UNDER ATTACK!.html, and a 168-Hour Clock

Continue exploring

Net EXPOSED: .net6 Files, Recovery_Instructions.html, and a 72-Hour Price Hike

Black TENGU EXPOSED: .TENGU Files, _README_TENGU.txt, and tengulocker@cyberfear.com

Elite Enterprise EXPOSED: No New Extension, a 7-Day Clock, and 227 BTC

Absolute Domination EXPOSED: .domination Files and a Full-Screen Password Screen

BQTLOCK EXPOSED: .BQTLOCK Files, a 48-Hour Clock, and @ZeroDayX1

SquadLocker EXPOSED: .SquadLocker Files, a $300 Ask, and Telegram

Developer EXPOSED: .developer18 Files and a 72-Hour Price Hike

Lalia EXPOSED: .lalia Files, RECOVERY_INFO.txt, and a 72-Hour qTox Clock

Prinz Eugen EXPOSED: .prinzeugen Files and No Note on the Desktop

Lockdown EXPOSED: .crypt_lock Files and a Lock Screen With No Inbox

Vect EXPOSED: .vect Files, !!!_READ_ME_!!!.txt, and a 128 KB Wiper Bug

Hnx911 EXPOSED: .hnx911 Files, HOW TO DECRYPT FILES.txt, and hnx911@yahoo.com

BOBER EXPOSED: Random Extensions, R3ADM3.txt, and a CONTI Inbox

Osa EXPOSED: .osa Files, +README-WARNING+.txt, and teamblding@outlook.com

Witch EXPOSED: .witch Files, readme.txt, and cozypandas@morke.ru

BuP1w EXPOSED: .BuP!w3 Files, BuP1wDecryptor@.txt, and a 48-Hour $600k Clock

0apt Locker EXPOSED: .0apt Files, README0apt.txt, and a 24-Hour Contact Clock

Bricks EXPOSED: .bricks Files, #HowToRecoverFiles.txt, and brunobiden76@gmail.com

Orexin EXPOSED: .orexin Files, HOW_TO_RECOVER.txt, and Telegram

Immigration EXPOSED: .eimmigration Files, WHATS_HAPPEND.txt, and a 72-Hour Leak Clock

MackDEV EXPOSED: .MackDEV Files, MackDEV_README.txt, and a 72-Hour Price Hike

Reynolds EXPOSED: .locked Files, ___RestoreYourFiles___.txt, and a qTox Inbox

ZETARINK EXPOSED: .ZETARINK Files, HOW-TO-DECRYPT.txt, and a 0.00015 BTC Wallet

LOCKED_X EXPOSED: .LOCKED_X Files, READ_ME.txt, and moniro@tutamail.com

Ndm448 EXPOSED: .ndm448 Files, +README-WARNING+.txt, and thomasandersen70@onionmail.org

Ransoomed EXPOSED: .ransoomed Files, !!!READ_ME!!!.txt, and a 2.5 BTC Genesis Wallet

EagleLocker EXPOSED: .daibang Files, a $1000 Pop-Up, and a Jigsaw Clone

01Flip EXPOSED: .01flip Files, RECOVER-YOUR-FILE.TXT, and 01Flip@proton.me

FLocker Ransomware EXPOSED: .Flock Files and FLOCK_DECRYPT.txt

ZAWOOO Ransomware EXPOSED: Random Names and How To Restore Your Files.txt

UMBRA Ransomware EXPOSED: .umbra Files and README Victim ID

Vitya Ransomware EXPOSED: .vitek Files and a Telegram Pop-Up

GodDamn Ransomware EXPOSED: .God8Damn Files and a 12-Hour Discount

DeadLock Ransomware EXPOSED: .dlock Files and a Session Chat

PicMo Ransomware EXPOSED: Random Names and How To Restore Your Files.txt

Jeckel Ransomware EXPOSED: .jeckel-lock Files and a $1,200 Ethereum Ask

MAJINAHANASHI Ransomware EXPOSED: .majin Files and README.txt

Devill Ransomware EXPOSED: Random Five-Letter Endings and Readme.txt

Reynolds EXPOSED: .locked Files, _RestoreYourFiles_.txt, and a qTox Inbox