CryptoPatronum Ransomware
The CryptoPatronum Ransomware is one of the most recently spotted data-locking Trojans circulating the Web and seeking victims. Cybercriminals' interest in distributing ransomware threats do not seem to be winding down. Likely, the low-entry barrier and the fact that it is fairly easy to generate cash may be the main reasons behind the popularity of file-encrypting Trojans. Dealing with a ransomware threat is not a pleasant experience certainly – these Trojans would infiltrate your system, encrypt your data and blackmail you into paying them a fee.
Propagation and Encryption
There are several propagation methods that are very popular when it comes to infection vectors linked to ransomware threats. Spam emails containing macro-laced attachments, fake software updates, and downloads, torrent trackers, malvertising campaigns, bogus pirated copies of various applications, and media are among the most commonly used propagation methods used for the distribution of data-locking Trojans. Regardless of how the CryptoPatronum Ransomware compromises your computer, its attack may be devastating for your data.
The CryptoPatronum Ransomware is designed to go after a wide range of file types, which means that it is more than likely that all your data will be encrypted and unusable after the attack takes place. This nasty Trojan would apply an encryption algorithm to lock all of your images, audio files, documents, videos, databases, archives, spreadsheets, presentations, etc. All the newly locked files will be given an additional extension - '.cryptopatronum@protonmail.com.enc.' For example, a photo you may have named 'summer-night.mp3' will be swiftly renamed to 'summer-night.mp3.cryptopatronum.com.enc.'
The Ransom Note
The CryptoPatronum Ransomware drops a file that contains the attackers' ransom message on the victim's desktop. The file is named 'HOW TO RECOVER ENCRYPTED FILES.TXT.' A large number of creators of ransomware threats opt to use all caps when naming their ransom notes. This is because the large font is likely to attract the attention of the users and ensure that they will read the ransom message of the attackers. The authors of the CryptoPatronum Ransomware offer their victims to unlock three of their encrypted files for free. This serves as proof that the attackers possess a working decryption key that would help the user recover their data. The ransom fee required by the creators of the CryptoPatronum Ransomware is either 1 Bitcoin (about $9,000 at the time of typing this post) or 50 Ethereum (approximately $8,500). The authors of this nasty pest expect to be contacted via email - 'cryptopatronum@protonmail.com.'
As you can see, the attackers are asking for quite the hefty sum, to say the least. There is no point in giving in to their demands and wasting your hard-earned cash, as there are zero guarantees that they will hold up their end of the deal. This is why you should look into obtaining a legitimate anti-virus software suite that will not only wipe off the CryptoPatronum Ransomware from your computer but also ensure your system's safety in the future.
