blueKey Ransomware
Cybercriminals have created another deleterious malware threat that can be utilized in ransomware attacks. Named blueKey Ransomware, the threat targets numerous file types and encrypts them with a strong cryptographic algorithm. Victims will lose access to their documents, PDFs, archives, databases, photos, images and more. The attackers will then extort the affected victims for money, in exchange for sending the necessary decryption keys or software tool. Of course, trusting cybercriminals may not be a good idea, as there are no guarantees that the hackers will keep their word or that all encrypted data will be successfully restored.
Each file locked by the threat will have its name modified via the addition of '.blueKey' as a new file extension. In addition, the ransomware will change the current desktop background and create a text file named 'DECRYPTION_INSTRUCTIONS.txt.' Both the new wallpaper image and the text file contain an identical ransom note with instructions from the threat actors.
According to the message, victims must pay a ransom of $20. However, only transactions made in Bitcoin will be accepted by the attackers. After sending the money to the provided cryptowallet address, users are expected to provide proof delivered as an email to the 'thegodfather83@mailfence.com' address.
The full set of instructions left by blueKey Ransomware is:
'Your important files are encrypted!
If you see this text, then your files are no longer accessible, because they have been encrypted. Perhaps
you are busy looking for a way to recover your files, but don't waste your time. Nobody can recover your
files without our decryption service.In order to decrypt, please follow the instructions:
Send $20 USD worth in bitcoin to the following address:
17CqMQFeuB3NTzJ2X28tfRmWaPyPQgvoHVSend an email with the payment proof and your personal instalation key to thegodfather83@mailfence.com
Your personal instalation key:
How to buy bitcoins? - hxxps://www.blockchain.com/learning-portal/how-to-get-bitcoins'
