GlUTe Ransomware

The GlUTe Ransomware is a new data-locking Trojan that is likely propagated via fake emails. Threats like the GlUTe Ransomware are usually distributed via corrupted attachments that appear to be harmless files at first glance. The attached file is programmed to exploit a known vulnerability in the Microsoft Office service – this would allow the GlUTe Ransomware to compromise the targeted system. Some cyber crooks use malvertising, fake application updates/downloads and other clever techniques to distribute ransomware threats.

Once the GlUTe Ransomware infects a system, it will scan it before trigging the encryption process. The GlUTe Ransomware will make sure to lock all your documents, audio files, images, videos and other filetypes with a secure encryption algorithm. The newly locked files will have a ‘.GlUTe’ extension at the end of them. Therefore, a file, which was initially called ‘maroon-web.gif,’ will be renamed to ‘maroon-web.gif.GlUTe’ after the encryption process has been completed. Next, the GlUTe Ransomware will drop a ransom note called ‘HOW TO DECRYPT FILES.txt,’ which carries the message of the attackers. The authors of the GlUTe Ransomware claim that they would provide the victim with a decryption key as long as they get paid 0.07 Bitcoin (approximately $660 at the time of typing this post). Unlike other authors of ransomware threats, the creators of the GlUTe Ransomware do not provide users with proof that they are able to unlock their data. The attackers have offered an email address as a means of communication – ‘glutezon@gmx.com.’

Users who opt to pay up may end up being tricked, so it is recommended to avoid contacting the attackers altogether. You should look into obtaining a trustworthy anti-virus software suite that will help you remove the GlUTe Ransomware from your computer. You also can try recovering some of the data using a third-party file recovery solution.