Aris Ransomware

The Aris Ransomware is a nasty Trojan, whose goal is to infiltrate your PC, encrypt your data, and demand a ransom to revert the damage done to your files. Malware analysts have come across the Aris Ransomware only recently. The Aris Ransomware does not appear to belong to any of the well-known ransomware families.

Propagation and Encryption

The purpose of the Aris Ransomware is to encrypt as many files as possible once it compromises your computer. This is why this Trojan will make sure to lock .png, .jpeg, .jpg, .gif, .svg, .pdf, .docx, .doc, .txt, .ppt, .pptx, .xls, .xlsx, .db, .zip, .rar, .mp3, .midi, .mid, .wav, .webm. .mp4, .mov, and a wide variety of other files that are present on your system. As a result of the Aris Ransomware attack, all of your images, audio files, videos, presentations, spreadsheets, documents, databases, archives, and other filetypes will be encrypted, and you will not be able to use them. This file-locker adds a '.aris' extension to the names of the locked files. For example, a file that was originally called 'creamy-coffe.pdf,' will be renamed to 'creamy-coffee.pdf.aris.' The Aris Ransomware authors are likely to use various distribution methods such as corrupted advertisements, torrent trackers, fake pirated copies of popular applications, bogus software downloads, fraudulent social media posts, mass phishing emails, etc.

The Ransom Note

The Aris Ransomware would drop a text file containing the ransom message of the attackers. The name of the file is 'readme.txt.' The attackers state that they have used the AES-256 encryption algorithm to lock the user's files. In the ransom message, the Aris Ransomware creators mention that the ransom fee is $75 and should be paid in Bitcoin. They warn users that there is a 7-day deadline, and unless the ransom fee is paid within a week, the ransom fee would be increased to $500.

It is never a healthy idea to give in to the demands of cybercriminals online, like the authors of the Aris Ransomware. Instead, consider obtaining a reputable anti-malware solution that will help you remove the Aris Ransomware from your computer and make sure your system is protected from such threats in the future.