4k Ransomware

Malware experts have detected yet another new ransomware threat. They dubbed it the 4k Ransomware, and when inspected further, it became clear that this file-locking Trojan belongs to the Dharma (also known as Crysis) Ransomware family. This is an increasingly common approach. Instead of building a brand new ransomware threat, the cyber crooks simply take an already existing one and alter it ever so slightly. Then, they propagate it as their own and make a profit.

Researchers speculate that the 4k Ransomware is spread via the most common means. These usually are spam email campaigns, pirated applications and fake software updates. When 4k Ransomware infects your machine, it will begin its threatening operation by performing a scan. The purpose of the scan is to identify and locate the data, which 4k Ransomware targets. Usually, these are the most common file-types, like .pdf, .doc, .mov, .mp3, .mp4, .jpeg, .jpg, .gif, .png, etc. When these files are located, the 4k Ransomware starts the encryption process. After the 4k Ransomware encrypts your files, they would have a new extension added to them. Like most ransomware threats, which belong to the Crysis/Dharma family, the 4k Ransomware also follows a certain pattern when renaming the affected files. The 4k Ransomware adds the '.id-.[rocosmon@cock.li].4k' extension to the newly locked data. The next step of the 4k Ransomware's attack is dropping a ransom note. The perpetrators of the attack do not mention the ransom fee demanded but give out an email address where the victim is expected to contact them and receive further instructions – rocosmon@cock.li.

It is important to remember that it is never advisable to get in touch with cybercriminals or attempt to negotiate with them. They do not hold your best interest at heart and will most likely trick you. A much more preferable approach would be to acquire a legitimate anti-malware tool and wipe your system clean.