Malware News New Alfa, or Alpha Ransomware from the same devs as Cerber

[Jrs30]

Security researcher BloodDolly recently discovered a new file encrypter called Alfa Ransomware, or Alpha Ransomware, which is from the developers of Cerber. As BloodDolly is still currently analyzing this ransomware, not much is known about this ransomware at this time. Preliminary reports, though, indicate that files encrypted by Alfa Ransomware are not decryptable.

How Alfa Ransomware Encrypts a Victim's Files

It is currently unknown how Alfa Ransomware is distributed, but when infected the ransomware will scan all the local drives for certain file types. When it finds a targeted file extension it will encrypt the file and append the .bin extension to the encrypted file. For example, test.jpg will be encrypted to the filename test.jpg.bin. The file types currently targeted by the Alfa Ransomware are

.c, .h, .m, .ai, .cs, .db, .nd, .pl, .ps, .py, .rm, .3dm, .3ds, .3fr, .3g2, .3gp, .ach, .arw, .asf, .asx, .avi, .bak, .bay, .cdr, .cer, .cpp, .cr2, .crt, .crw, .dbf, .dcr, .dds, .der, .des, .dng, .doc, .dtd, .dwg, .dxf, .dxg, .eml, .eps, .erf, .fla, .flvv, .hpp, .iif, .jpe, .jpg, .kdc, .key, .lua, .m4v, .max, .mdb, .mdf, .mef, .mov, .mp3, .mp4, .mpg, .mrw, .msg, .nef, .nk2, .nrw, .oab, .obj, .odb, .odc, .odm, .odp, .ods, .odt, .orf, .ost, .p12, .p7b, .p7c, .pab, .pas, .pct, .pdb, .pdd, .pdf, .pef, .pem, .pfx, .pps, .ppt, .prf, .psd, .pst, .ptx, .qba, .qbb, .qbm, .qbr, .qbw, .qbx, .qby, .r3d, .raf, .raw, .rtf, .rw2, .rwl, .sql, .sr2, .srf, .srt, .srw, .svg, .swf, .tex, .tga, .thm, .tlg, .txt, .vob, .wav, .wb2, .wmv, .wpd, .wps, .no, .xlk, .xlr, .xls, .yuv, .back, .docm, .docx, .flac, .indd, .java, .jpeg, .pptm, .pptx, .xlsb, .xlsm, .xlsx

Read more : New Alfa, or Alpha Ransomware from the same devs as Cerber

 

[Captain Awesome]

This why we need an Anti-Ransomware protection and a Strong AV.

 

[hjlbx]

This why we need an Anti-Ransomware protection and a Strong AV.

All that is needed is anti-exec or software restriction policy soft to stop the vast majority of malware. Don't download and execute unknown\untrusted files on your system in the first place. It isn't difficult to manually analyze a file to determine whether or not it is dodgy...

 

[jamescv7]

The introduction of Anti-Ransomware protection is just same as AV which must frequently update because of various techniques provided by the threats.

 

[simbelmayne]

This why we need an Anti-Ransomware protection and a Strong AV.

That's why we need brain, to think before we download some trashy stuff from third-class websites, and before we open the e-mail attachments, even if we don't expect any such emails.