BKC Ransomware
A newly emerged data-locking Trojan caught the attention of malware experts very recently. It was given the name BKC Ransomware quickly, and when inspected more thoroughly it turned out that this threat is not new completely, but instead it is a new variant of the widely known GlobeImposter Ransomware 2.0. More and more variants of well-established ransomware threats keep popping up daily. It would seem that infamous threats such as the GlobeImposter Ransomware 2.0, the STOP Ransomware, and the Dharma Ransomware are in the backbone of many of the newly emerging file-encrypting Trojans that keep springing up.
It is not 100% certain how the individuals behind the BKC Ransomware are propagating their creation, but it is likely that they employ the methods of most ransomware authors such as faux updates, infected pirated data, and email campaigns. When the BKC Ransomware infiltrates a system successfully it will start scanning it for the file types it would target. Once this is done, the BKC Ransomware would begin the next step of the attack – the encryption process. When the BKC Ransomware locks a file, it adds its own extension '.[blellockr@godzym.me].bkc' meaning that if a file were called 'chocolate-box.png' prior to the attack, it would be called 'chocolate-box.png.[blellockr@godzym.me].bkc' after the attack has concluded. After this, the BKC Ransomware would proceed to drop a ransom note for the victim. These ransom notes usually consist of a brief explanation of what has occurred and an email address where the victim is supposed to contact the attackers. In our case, the address given is blellockr@godzym.me.
It is never recommended to comply with the demands of cybercrooks. It is very likely that they will not tell the truth to you and instead, will try and convince you just to give them the cash and they will solve all the issues they have caused. Often, this is not the case, and you will not be provided with a decryption tool for your locked data. This is why a safer approach is to trust a reputable anti-malware application, which will clean your computer and perhaps after this attempt to retrieve some of the files that the BKC Ransomware has locked using third-party data-recovery software.
