Gomer Ransomware
Gomer Ransomware Image
The Gomer Ransomware is one of the most recently identified file-lockers that target unsuspecting users online. Threats of the Ransomware kind are very popular in the world of cybercrime as it allows conmen to generate cash quickly.
Propagation and Encryption
To cause maximal damage to the compromised host, the Gomer Ransomware would go after a very long list of filetypes. The data targeted by the Gomer Ransomware includes .xls, .xlsx, .pdf, .doc, .docx, .txt, .mp3, .midi, .mid, .aac, .wav, .mov, .mp4, .webm, .png, .gif, .jpg, .jpeg, .svg, .db, .zip, .rar and many other filetypes. To lock the targeted files, the Gomer Ransomware applies an encryption algorithm. After the encryption, the affected files' names will be changed. The Gomer Ransomware appends a '.gomer' extension to the names of all the encrypted files. After the files have been encrypted, you will no longer be able to use them. The Gomer Ransomware is likely spread with the help of malvertising, phishing email campaigns, torrent trackers, fake software updates and downloads, bogus social media operations and other propagation techniques.
The Ransom Note
After completing the encryption process, the Gomer Ransomware drops a file on the victim's computer. The name of the file is 'GOMER-README.txt,' and it contains the ransom message of the attackers. In the ransom message, the attackers state that they demand to be contacted via email ‘support-gomer@pm.me.' They also make it clear that the ransom fee should be paid in Bitcoin. To prove to the user that they have a functioning decryption tool, the authors of the Gomer Ransomware offer to decrypt one file free of charge.
It is not recommended to trust the words of cybercriminals like the individuals responsible for the Gomer Ransomware. There is no way to know whether you will be provided with the decryption tool needed, even if the ransom fee demanded is paid. This is why you should consider investing in a genuine, modern anti-malware solution that will help you remove the Gomer Ransomware from your system safely.
