CLUB Ransomware

The Club Ransomware is a threat that is a part of the Dharma Ransomware family. The Club Ransomware encrypts all documents, images and videos, and appends the '.[admin@stelsdatas(dot)com](dot)club' extension to them. The encrypted files become inaccessible to the victim. The cybercriminals operating the Club Ransomware demand that the victim pays a ransom in the Bitcoin cryptocurrency, with the promise to decrypt the encrypted files.

After the Club Ransomware infiltrates a system, it scans the machine for images, videos, and documents such as .doc, .docx, .xls, .pdf, etc. The Club Ransomware encrypts all files found matching the criteria and adds the extension '.[admin@stelsdatas(dot)com](dot)club.' Once the Club Ransomware has encrypted the data on the victim’s computer, the Club Ransomware creates and shows the "FILES ENCRYPTED.txt" text file, which is a ransom note. The file provides instructions on how to contact the cybercriminals who operate the Club Ransomware. The crooks give an email address for contact and demand a ransom in the amount of $500 or more in Bitcoin.

This is the Club ransomware ransom note:

'YOUR FILES ARE ENCRYPTED

Don’t worry,you can return all your files!

If you want to restore them, follow this link email: admin@stelsdatas(dot)com

If you have not been answered via the link within 12 hours, write to us by e-mail: admin@stelsdatas(dot)com

Attention!

Do not rename encrypted files.

Do not try to decrypt your data using third party software, it may cause permanent data loss.

Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.'

Currently, there are no known decryption methods to recover the files encrypted by the Club Ransomware. But cybersecurity experts are always looking for decryption methods. Additionally, sometimes ransomware operators go out of business and release keys for past victims. For these reasons, it is recommended to save encrypted data or keep copies of them stored safely.