Covm Ransomware
Covm Ransomware Image
The Covm Ransomware is yet another variant of the notorious STOP Ransomware. The STOP Ransomware family was the most popular ransomware family of 2019 when cyber crooks from all around the world ended up releasing over 200 copies of this threat.
Propagation and Encryption
The Covm Ransomware can be propagated via different methods, including mass spam emails that contain corrupted attachments designed to look like harmless files, malvertising campaigns, fake application downloads and updates, bogus pirated copies of popular software tools, etc. When the Covm Ransomware infects your PC, it will scan your data and locate the files that meet its criteria. The Covm Ransomware will go after a wide array of filetypes - .doc, .docx, .jpg, .jpeg, .mp3, .mp4, .mov, .pdf, .xls, .xlsx, .rar, .gif, .png, and many others. Next, the Covm Ransomware will begin encrypting the targeted files. The names of the affected files will be altered because the Covm Ransomware adds a new extension – ‘.covm.’ For example, a file that was named ‘stone-table.png’ will be renamed to ‘stone-table.png.covm.’
The Ransom Note
The Covm Ransomware drops the message of the attackers on the user’s system. The name of the file that contains the message is ‘_readme.txt.’ The Covm Ransomware ransom note consist of several key points:
- The ransom fee is $980.
- Victims who contact the attackers within 72 hours only have to pay half the price - $490.
- The contact details are ‘restoremanager@firemail.cc’ and ‘helpmanager@mail.ch.’
- The attackers are willing to unlock 1-2 files for free to prove that they have a working decryption key.
We would advise you to stay clear of cyber crooks like the ones behind the Covm Ransomware. You are likely never to receive the decryption tool you have paid for, so there is no point in wasting your hard-earned cash. Remove the Covm Ransomware from your computer with the help of a reputable anti-spyware solution.
