Centurion_Legion Ransomware
The Centurion_Legion Ransomware is a ransomware threat that is used to force computer users to pay large amounts of money. Like most ransomware Trojans, the Centurion_Legion Ransomware encrypts ITS victim's files and demands the payment of a large ransom in exchange for the decryption key. The Centurion_Legion Ransomware belongs to the Troldesh family of ransomware Trojans, which has been responsible for numerous attacks in 2016. The Centurion_Legion Ransomware appends the extension '.the Centurion_legion_@_aol.com.xtbl' to each encrypted file. Apart from encrypting the victim's files, the Centurion_Legion Ransomware also changes the affected computer's Desktop wallpaper image to demand a ransom from the victim.
Table of Contents
The Costly Ransom Asked by the Centurion_Legion Ransomware
The changed Desktop wallpaper image displays a message alerting the victims that their files were encrypted, and it is necessary to contact the Centurion_Legion Ransomware's developers. The Centurion_Legion Ransomware claims that it uses an asymmetric encryption, which prevents decryption without access to a private key that is stored on the con artists' servers. Victims of the Centurion_Legion Ransomware are encouraged to purchase the private key by emailing the email addresses provided. Apart from the email address included in the Centurion_Legion Ransomware's file extensions, the email addresses mailrepa.lotos_@_aol.com and goldman0_@_india.com have also been linked to the Centurion_Legion Ransomware. The Centurion_Legion Ransomware demands payment in BitCoins that usually averages at about $1000 USD. The Centurion_Legion Ransomware may not provide the private key to computer users that pay the Centurion_Legion Ransomware ransom. Computer users should refrain from paying the Centurion_Legion Ransomware ransom. Unfortunately, files encrypted using the latest version of the Centurion_Legion Ransomware cannot be decrypted with a decryption utility. The best way to recover the files affected by the Centurion_Legion Ransomware is to make sure that all files are always backed up on an external device.
How the Centurion_Legion Ransomware Infection Works
The Centurion_Legion Ransomware is a clone of various other ransomware Trojans, including Ecovector, JohnnyCryptor and Green_Ray. All of these encryption Trojans use the same attack approach, only differing in the contents of the ransom note and how much it will cost. The Centurion_Legion Ransomware may be distributed using corrupted email attachments. The presence of the Centurion_Legion Ransomware and similar ransomware Trojan infections has also been observed in peer-to-peer (P2P) file sharing networks. The best way to prevent the Centurion_Legion Ransomware from being installed is to use an updated security program and always avoid opening unsolicited email attachments. A good anti-spam filter also can prevent emails containing the Centurion_Legion Ransomware from entering the victim's inbox in the first place.
Dealing with Threats Like the Centurion_Legion Ransomware
Since files encrypted using the Centurion_Legion Ransomware cannot be decrypted without access to the decryption key, the best measures regarding the Centurion_Legion Ransomware are preventive. PC security analysts strongly advise computer users to keep a backup of all files on an external memory drive. Computer users should limit exposure to other computers in a network by protecting the affected network with a reliable firewall. The best way to prevent the Centurion_Legion Ransomware attacks, however, is by changing one's online behavior, by avoiding potentially threatening online content.
It is not recommended to pay the Centurion_Legion Ransomware ransom. Malware researchers have received reports from computer users indicating that even after large ransoms are paid, of at least $1000 USD, the decryption key was not provided by the con artists. It is, of course, unreasonable to expect that the people responsible for the Centurion_Legion Ransomware would keep their promise after the ransom amount is paid. Because of this, instead of negotiating with con artists, restore the files from a backup. In all cases, keeping a back-up of your files will cost only a tiny fraction of what it would cost to pay the ransom involved in these attacks.
