Blammo@cock.li Ransomware
The Blammo@cock.li Ransomware is an encryption ransomware Trojan. PC security researchers first reported the Blammo@cock.li Ransomware on March 15, 2018. There is nothing remarkable about the Blammo@cock.li Ransomware particularly, and it is nearly identical to the many other encryption ransomware Trojans that are being used to attack computer users nowadays. The Blammo@cock.li Ransomware is one more variant in the Dharma family of ransomware, which includes numerous generic encryption ransomware threats. The Blammo@cock.li Ransomware is delivered to its victims through the use of spam email messages that include file attachments with embedded macro scripts that download and install the Blammo@cock.li Ransomware onto the victim's computer, like many other similar threats that are being used to attack computer users currently.
How to Recognize an Infection by the Blammo@cock.li Ransomware
The Blammo@cock.li Ransomware attack is simple to understand. These threats are designed to take victims' files hostage, encrypting them with a strong encryption algorithm to make them inaccessible and then demanding the payment of a ransom from the victim to restore access to the affected files. The Blammo@cock.li Ransomware uses the AES 256 encryption to make the victim's files inaccessible. This is a strong encryption method and, unfortunately, once a file has been encrypted using the AES 256 encryption, it will no longer be recoverable. Threats like the Blammo@cock.li Ransomware are designed to encrypt the user-generated files while avoiding the Windows system files. Common file types that will be encrypted during attacks like the Blammo@cock.li Ransomware include:
.3dm, .3g2, .3gp, .7zip, .aaf, .accdb, .aep, .aepx, .aet, .ai, .aif, .as, .as3, .asf, .asp, .asx, .avi, .bmp, .c, .class, .cpp, .cs, .csv, .dat, .db, .dbf, .doc, .docb, .docm, .docx, .dot, .dotm, .dotx, .dwg, .dxf, .efx, .eps, .fla, .flv, .gif, .h, .idml, .iff, .indb, .indd, .indl, .indt, .inx, .jar, .java, .jpeg, .jpg, .js, .m3u, .m3u8, .m4u, .max, .mdb, .mid, .mkv, .mov, .mp3, .mp4, .mpa, .mpeg, .mpg, .msg, .pdb, .pdf, .php, .plb, .pmd, .png, .pot, .potm, .potx, .ppam, .ppj, .pps, .ppsm, .ppsx, .ppt, .pptm, .pptx, .prel, .prproj, .ps, .psd, .py, .ra, .rar, .raw, .rb, .rtf, .sdf, .sdf, .ses, .sldm, .sldx, .sql, .svg, .swf, .tif, .txt, .vcf, .vob, .wav, .wma, .wmv, .wpd, .wps, .xla, .xlam, .xll, .xlm, .xls, .xlsb, .xlsm, .xlsx, .xlt, .xltm, .xltx, .xlw, .xml, .xqx, .xqx, .zip.
When the Blammo@cock.li Ransomware attack encrypts the files, they will be marked with the addition of a new file extension to the end of the affected file's name, which will include an email address where to contact the attackers. The Blammo@cock.li Ransomware has several variants, all using different email addresses for contact. Some of the file extensions that have been used to mark the files from variants of the Blammo@cock.li Ransomware attack include:
.id-{id}.[bitcoin888@cock.li].arrow
.id-{id}.[Blammo@cock.li].arrow
.id-{id}.[marat20@cock.li].arrow
.id-{id}.[vauvau@cock.li].arrow
Dealing with a Blammo@cock.li Ransomware Attack
The Blammo@cock.li Ransomware attack's purpose is to take over the victim's computer, compromising the victim's files and then demanding the payment of a ransom. Unfortunately, the attack uses a strong encryption algorithm, and the files are not easily recoverable after they have been compromised. The Blammo@cock.li Ransomware demands the payment of a ransom, urging the victim to contact its perpetrators via email. When the victims contact these people, they will be asked to make a large payment via Bitcoin in exchange for the software needed to restore the affected files. However, the advised course of action is to avoid paying this ransom. There is no guarantee that the cybercrooks responsible for the Blammo@cock.li Ransomware attack will deliver the decryption key or help the victim recover the affected files. These people are just as likely to demand additional payments or ignore the victims of the attack. That is what makes crucial to have file backups on the cloud storage or a portable memory device. This is the best way to ensure that your data is safe from threats like the Blammo@cock.li Ransomware.
