Dkey Ransomware
The Dkey Ransomware is a variant of the Dharma malware family. The threatening strains of this prolific family can cause massive damage to the data stored on the devices they infect, and the Dkey Ransomware has retained that destructive capacity. Victims of the threat will find themselves in a situation where their documents, photos, images, archives, databases and many other file types are no longer accessible or usable.
Following the established behavior of the Dharma threat, the Dkey Ransomware also modifies the names of the files it encrypts. The threat appends them with an ID string specially generated for the particular victims, an email address belonging to the threat actors ('Daniel22key@aol.com'), and '.dkey' as a new file extension. Furthermore, the threat will deliver two ransom notes for its victims.
The shorter of the two notes is dropped on the breached devices inside a text file named 'FILES ENCRYPTED.txt.' This message simply states that victims are expected to contact the attackers by messaging either the 'Daniel22key@aol.com' email address or 'Daniel22key@cock.li.' However, the main ransom note will be shown inside a pop-up window. Here, the cybercriminals also mention their two emails but finish their message with a list of several warnings.
The full text of the ransom note shown in the pop-up window is:
'YOUR FILES ARE ENCRYPTED
Don't worry,you can return all your files!
If you want to restore them, follow this link:email Daniel22key@aol.com YOUR ID -
If you have not been answered via the link within 12 hours, write to us by e-mail:Daniel22key@cock.liAttention!
Do not rename encrypted files.
Do not try to decrypt your data using third party software, it may cause permanent data loss.
Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.'
The text file delivers the following message:
'all your data has been locked us
You want to return?
write email Daniel22key@aol.com or Daniel22key@cock.li'
