Bengalcat Ransomware
The Bengalcat Ransomware is a newly detected ransomware threat that has been released in the wild. The malware aims to infect computers, initiate an encryption process, and then extort its victims for money. The strong encryption algorithm ensures that affected users cannot decrypt the locked data by themselves. Each file impacted by Bengalcat will have '.777' appended to its original name as a new extension. Upon completing its encryption routine, the threat will drop ransom notes in every folder containing locked data as text files named 'read_it.txt.'
The Bengalcat Ransomware Collects Data
According to the instructions from the cybercriminals, the Bengalcat ransomware does more than just encrypt files. The threat has allowed the hackers to collect information from their victims such as employee info, customer databases, and other business-related files apparently. Victims are then threatened that if they do not establish contact and pay the demanded ransom, their data will be released to the public causing a lot of negative consequences. To reach the hackers, affected users are provided with two communication channels - an email address at 'i-muknown@protonmail.com' and an account for the open communication protocol Jabber XMPP (bengalcat@jabbim.ru).
The full text of the ransom note is:
'----> Oh no ( <----
All of your files have been encrypted
-Your network was infiltrated and we have exfiltrarted all your data , we have all your employee info, customers database, operations folder, webpage..
-All your files have been encripted.
-All your POS terminals have been modified to get any CC running on them.
But dont worry, you can buy our special software for decrypting all your files and you will get all your files back and we wont sell your info / customer data.
If you want to cooperate with us you can send us an email at
i-muknown@protonmail.com or jabber bengalcat@jabbim.ru
Otherwise you will never be able to decrypt your files and we will make all your files public, which might lead to fines and an astonishing lost of trust in your com.'
