Burn Ransomware
The Burn Ransomware is a malware with its origins dating back to the Scarab Ransomware's appearance around the Web. This threat was found to encrypt the user's files using a range of algorithms such as AES, RSA, and SHA to block access to crucial data. Once the files are encrypted, the Burn Ransomware proceeds to create a ransom note called 'HOW TO RECOVER ENCRYPTED FILES.txt,' dropping it in a visible location to attract the attention of the user. The ransom note's text states the following:
'Hello!
All your files have been encrypted!
Dont worry, you can return all your files!
Your ID:
+4IAAAAAAACo=eYJ***FJfy4M
If you want restore files, then write me on e-mail:
BM-2cUPRnXJRuFYKcDUCLugjrCPY58nrvHrAV@bitmessage.ch
Free decryption as guarantee!
Send me your ID and 1-2 small encrypted files(The total size of files must be less than 1Mb (non archived)) for free decryption.
After that, I'll tell you the price for decryption all files.
After payment we will send you the decryption tool that will decrypt all your files.
Attention!
* Do not rename encrypted files.
* Do not try to decrypt your data using third party software, it may cause permanent data loss.
* Decryption of your files with the help of third parties may cause increased price
(they add their fee to our) or you can become a victim of a scam.
How to obtain Bitcoins?
* The easiest way to buy bitcoins is LocalBitcoins site https://localbitcoins.net .
* You have to register, click 'Buy bitcoins', and select the seller by payment method and price.
https://localbitcoins.net/buy_bitcoins
* Later for payment use link https://localbitcoins.net/accounts/wallet/'
Users are advised to avoid paying any ransom demands, as there is no guarantee the threat actors behind the Burn Ransomware will return the files to their original state.
