Eyedocx Ransomware

The Eyedocx Ransomware is a potent malware threat that could lock its victims from accessing a vast portion of their data. When the threat is successfully deployed on a targeted computer, it will activate an encryption process that will impact the documents, PDFs, images, archives, database and possibly many other file types. Victims will notice that all of the encrypted files now have '.encrypted' attached to their original names as a new extension.

The threat also will deliver a text file named 'readme.information' on the victim's device. The file carries a ransom note with instructions from the threat actors. Reading the message reveals that victims must contact the cybercriminals to receive additional information on how to pay the demanded ransom. To establish contact, they can either message the hackers' Telegram account or the 'eyedocx@proton.me' email address.

The ransom note mentions that the ransom will be 'only' 3 Bitcoins. Even though the Bitcoin cryptocurrency has lost a sizeable portion of its value, 3 Bitcoins are still worth nearly $50, 000. Such sums are clearly out of reach for individual users, which could indicate that the Eyedocx Ransomware may be primarily targeting corporate entities.

The full text of the threat's ransom note is:

'If you want to decrypt your files please contact @eyedocx on Telegram
where you can get Telegram: hxxps://desktop.telegram.org/.
Or you can send an email to this mailbox:eyedocx@proton.me.
we only need 3 bitcoins,thanks!
your personalId is'