Threat Database Ransomware BandarChor Ransomware

BandarChor Ransomware

By GoldSparrow in Ransomware

Threat Scorecard

Threat Level: 100 % (High)
Infected Computers: 37
First Seen: September 8, 2015
Last Seen: July 8, 2021
OS(es) Affected: Windows

The BandarChor cryptomalware is a custom build of the CryptoLocker ransomware and is delivered to users as an attached archive file to spam emails. Cyber criminals are known to use various social engineering techniques to spread ransomware such as BandarChor, and you are not advised to open spam emails with misspelled sender names. In most cases, the BandarChor ransomware is loaded in spam emails that claim to be from PayPal, Amazon, eBay and Facebook referring to changes in privacy policies, refunds and recently made purchases. The emails loaded with BandarChor urge users to download the attached archive file to familiarize themselves with further details on the topic and at that point many users allow BandarChor to land on their machine. The archive file has a double extension and is an executable program that runs the BandarChor cryptomalware on your PC. The BandarChor ransomware places a copy of itself in the startup directory of Windows and presents users with a message stating: Attention! Your computer was attacked by virus-encoder. The BandarChor ransomware is known to encrypt files that are less than thirty megabytes, and that includes JPEG, PDF, DOC, DOCX, TXT, JPJ, PNG, XLS and HTML. The BandarChor ransomware modifies targeted files according to the scheme As you may guess, the segment contains the victim's unique identification number that users need to send to in an email requesting a decoder for their files. Malware researchers recognized two strands of the BandarChor cryptomalware and named them Trojan:W32/BandarChor.A and Trojan:W32/BandarChor.B and both use AES256 encryption for their operations. Users are reminded to use backup programs and not to pay ransomware demands to discourage cryptomalware development. Although, it gains popularity due to RaaS kits like Tox, Encryptor and ORX-Locker appearing on the Dark Internet. You might want to install a reputable anti-malware shield to counter the BandarChor ransomware and trojan droppers and exploit kits that may disperse it.


Most Viewed