Blaze Ransomware
Cybersecurity researchers have identified a new Babuk Ransomware variant named Blaze. The threat is used by hackers to lock their victims out of accessing important private, as well as corporate data. This harmful goal is achieved via an encryption process involving a military-grade cryptographic algorithm. The Blaze Ransomware can affect a wide range of different file types and leave them completely unusable.
Each locked file can be recognized by the '.blaze' file extension that will be appended to its original file name. Victims also will find out that a new text file has been created on the breached device. The name of this file should be 'How To Decrypt.txt,' and it will carry a ransom note with instructions from the attackers.
Ransom Note's Overview
The ransom-demanding message of the threat reveals that the cybercriminals are running a double-extortion scheme. Indeed, the hackers also claim to have collected important data from the victim's devices. If their demands are not fulfilled, the attackers threaten to release the acquired private information to the public, by publishing it on a dedicated leak site.
To get additional details, victims are instructed to establish contact via the provided communication channels. The ransom note mentions that the hackers can be reached via the TOX chat client or on their email at 'blazesupp@protonmail.com.'
The entire ransom-demanding message left by the threat is:
'Your data has been stolen and encrypted.
You can communicate with us with your privacy guaranteed using hxxps://tox.chat/download.html
Our TOX: 35F36AF07A7FD5232EB10F69DB4A6FB4AFA54A88357F0CD23816A6756FAA6F1E6462546B1727
or mail: blazesupp@protonmail.comIf you choose to ignore us and not pay the ransom, all stolen data will be published on the TOR website.
hxxp://imugmohnfb6akqz7jb6rqjusiwgnthjgm37mjygondgkwwyw3hwudkqd.onionCaution!
Do not modify the encrypted files, otherwise you may lose them permanently.'
