C4H Ransomware
The C4H Ransomware is a new data-encrypting Trojan targeting regular users. Ransomware threats are very popular malware as it allows its creators to generate cash rather quickly.
Propagation and Encryption
The C4H Ransomware may be propagated using various means:
- Mass spam email campaigns that contain corrupted attachments.
- Malvertising operations.
- Bogus pirated copies of commonly used software utilities.
- Fake applications updates and downloads.
Some authors of ransomware threats choose to use only one propagation method, while others prefer utilizing several infection vectors. It is not yet known whether the authors of the C4H Ransomware belong to the former or the latter group. When the C4H Ransomware compromises your computer, it will ensure to lock all the data it can get its hands on. This means that all your images, documents, audio files, videos, presentations, spreadsheets, archives, databases, and other files will be encrypted by the C4H Ransomware securely. Once this threat encrypts a file, it also changes its name by appending the ‘.C4H’ extension to it. For example, a file called ‘writing-desk.png’ will be renamed to ‘writing-desk.png.C4H’ after the encryption process is completed.
The Ransom Note
The C4H Ransomware would drop the ransom message of the attackers on the user’s computer. The message can be located in a file named ‘Decryption INFO.html.’ In the note, there are two email addresses mentioned as means of communication with the attackers – ‘chinarecoverycompany@cock.li’ and ‘chinarecoverycompany@airmail.cc.’ The attackers do not specify what the required ransom fee is, so it is likely that this information would be disclosed once the victim contacts the creators of this Trojan via email.
It is recommended to avoid contacting cybercriminals as there is no guarantee that you will be provided with the decryption tool you need to recover your data. Instead, you should consider investing in a trustworthy anti-spyware suite that will help you remove the C4H Ransomware from your computer safely.
