Covm Ransomware

Covm Ransomware Description

Covm Ransomware ScreenshotThe Covm Ransomware is yet another variant of the notorious STOP Ransomware. The STOP Ransomware family was the most popular ransomware family of 2019 when cyber crooks from all around the world ended up releasing over 200 copies of this threat.

Propagation and Encryption

The Covm Ransomware can be propagated via different methods, including mass spam emails that contain corrupted attachments designed to look like harmless files, malvertising campaigns, fake application downloads and updates, bogus pirated copies of popular software tools, etc. When the Covm Ransomware infects your PC, it will scan your data and locate the files that meet its criteria. The Covm Ransomware will go after a wide array of filetypes - .doc, .docx, .jpg, .jpeg, .mp3, .mp4, .mov, .pdf, .xls, .xlsx, .rar, .gif, .png, and many others. Next, the Covm Ransomware will begin encrypting the targeted files. The names of the affected files will be altered because the Covm Ransomware adds a new extension – ‘.covm.’ For example, a file that was named ‘stone-table.png’ will be renamed to ‘stone-table.png.covm.’

The Ransom Note

The Covm Ransomware drops the message of the attackers on the user’s system. The name of the file that contains the message is ‘_readme.txt.’ The Covm Ransomware ransom note consist of several key points:

  • The ransom fee is $980.
  • Victims who contact the attackers within 72 hours only have to pay half the price - $490.
  • The contact details are ‘’ and ‘’
  • The attackers are willing to unlock 1-2 files for free to prove that they have a working decryption key.

We would advise you to stay clear of cyber crooks like the ones behind the Covm Ransomware. You are likely never to receive the decryption tool you have paid for, so there is no point in wasting your hard-earned cash. Remove the Covm Ransomware from your computer with the help of a reputable anti-spyware solution.


  • mohamed nofal:

    i have multiple files encrypted & want to decrypt

    • GoldSparrow:

      Unfortunately, there is no tool currently available to decrypt the files. However, you can remove Covm Ransomware to stop any further encryption by using SpyHunter.

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.