2021 Ransomware Description
The 2021 Ransomware is a file-locking Trojan that's part of the Crysis Ransomware Ransomware-as-a-Service business. The 2021 Ransomware can stop media like spreadsheets, pictures, and documents from opening, delete backups, change extensions and leave ransom notes for the victims. While most cyber-security products should delete the 2021 Ransomware, offsite backups are the best chance for users to recover any locked files.
The Dharma Ransomware Rings in the Near Year a Little Later than Some Competition
To what should be no one's astonish, the Dharma Ransomware or the Crysis Ransomware business of locking files for ransoms remains active into the new year. The 2021 Ransomware is an early example of the Ransomware-as-a-Service's ongoing usefulness to threat actors, although it's not the first file-locker Trojans appearing in 2021. Like older and more recent relatives, both, the 2021 Ransomware sticks to the standards of locking files with encryption that keeps them from opening, according to the attacker's whims.
The 2021 Ransomware uses AES-256 and RSA-1024 encryption as a blunt cudgel to block users' media files, including documents and other content of any value. This attack includes a compound extension with the campaign's AOL e-mail, a victim ID, and an extension ('2021'), which users shouldn't confuse with the data encryption that stops the file from opening. Thanks to the RaaS's securing essential unlocking credentials, victims have limited avenues for reversing the attack or breaking the encryption.
At the business end of these attacks, users have two ransom notes for perusing: an HTA pop-up and a text file. Both of them include little other than the standard information that most readers already should know, such as insisting on Bitcoin ransoms for restoring the victim's work. As a general precaution, the 2021 Ransomware also may delete the system's local Restore Point information, which improves its bargaining position over the files.
Don't Let Trojans Define the Year
The 2021 Ransomware might be the next model of a years-seasoned Trojan business, but its samples don't differ much from older variants' habits. As malware analysts compare the 2021 Ransomware to older equivalents, such as the Gac Ransomware, the GOLD Ransomware, the MUST Ransomware, or the YUFL Ransomware, any differences are minimal. Still, the Trojan is a significant threat to users without backups, who are in the most danger of losing all their media without fanfare.
Users always should have backups on other storage devices for restoration after Trojan attacks. Malware researchers also find the following steps useful for preventing infections before they happen:
- Installing security-related updates promptly
- Avoiding illicit download resources (game cracks, copyright-protected movies)
- Using strong passwords
Users with cyber-security programs also may leverage them to their benefit. Scanning downloads before opening them always is wise, and malware experts confirm that most security programs will identify and remove the 2021 Ransomware appropriately.
The 2021 Ransomware rings in the new year the same way its family attacked victims in the past one. Anyone who wants a happier conclusion than a ransom knows what to do: back their files up, fast.