Threat Database Ransomware '.justice File Extension' Ransomware

'.justice File Extension' Ransomware

By GoldSparrow in Ransomware

The '.justice File Extension' Ransomware is an encryption ransomware Trojan that is based on the Jigsaw Ransomware, a well-known ransomware Trojan that has numerous variants. In the last half of 2017, PC security researchers observed the onset of various updated versions in this family of threats. Although Jigsaw variants are still not a large part of the number of encryption ransomware Trojans that are active currently, the attacks carried out by variants of this family have kept this ransomware family updated actively.

The Unfair Actions of the '.justice File Extension' Ransomware

The '.justice File Extension' Ransomware carries out a typical ransomware attack, using a strong encryption algorithm to make the victim's files inaccessible and then demanding a ransom payment from the victim through a ransom note dropped on the infected computer. Reports of the '.justice File Extension' Ransomware attack was first received on January 6, 2018. The '.justice File Extension' Ransomware's attacks started occurring in Western Europe and Turkey. The '.justice File Extension' Ransomware is being delivered to victims through the use of spam email attachments, a typical delivery method associated with these threats. The victims will receive a spam email message with an attached DOCX or PDF file that uses a corrupted embedded macro script to download and install the '.justice File Extension' Ransomware onto the victim's computer.

How the '.justice File Extension' Ransomware Carries out Its Attack

The '.justice File Extension' Ransomware uses the AES 256 and RSA 2048 encryptions to make the victim's files inaccessible. Once the '.justice File Extension' Ransomware find and affect the targeted files, their contents are, unfortunately, impossible to recover without the decryption key. The '.justice File Extension' Ransomware will encrypt a wide variety of files, and then mark them by adding the file extension '.justice' to the end of the enciphered file's name. The '.justice File Extension' Ransomware will encrypt files with the following extensions:

PDF, DOCX, DOC, PPTX, PPT, XLS, XLSX, MP3, MP4, AVI, DB, SQLITEDB, MDB, JPEG, JPG, PNG, BMP, MKV.

The '.justice File Extension' Ransomware also will delete the Shadow Volume Copies and prevent other methods that could be used to recover the files affected by the '.justice File Extension' Ransomware attack.

The '.justice File Extension' Ransomware's Ransom Demand

The '.justice File Extension' Ransomware delivers a ransom note written in Turkish, which demands that the victim pays a ransom in exchange for the software necessary to restore the affected files. The '.justice File Extension' Ransomware delivers its ransom note in a pop-up program window, and its text is written in Turkish entirely. The full text of the '.justice File Extension' Ransomware ransom note reads:

'BU PROGRAM AÇILDIYSA TÜM SİSTEM DOSYALARINIZ KiLiTIENMİSTİR. BU KİLİDİ AÇABİLMENİZ İÇİN TEK GEREKEN SEV PARADIR
KORKMAYIN BU PARA SİZİN DEĞİLDİR. SİZDEN İSTEMİ$ OLDUĞUMUZ PARA BU ZAMANA KADAR ÇALI$TIRDIĞINIZ İNSANLARIN EMEKLERİNDEN CALDIĞINIZ PARADIR ENDİ$ELENECEK BİR DURUM YOKTUR.
SİZLERE BU KONUYU DOWNMENİZ İÇİN VAKİT TANIYORUZ. VAKTİNİZİN BEDELİ OLARAK HER DAKİKA 1 DOSYA SİLİNECEKTİR EĞER DOSYALARINIZIN BİR ÖNEMİ YOK İSE TÜM DOSYALARINIZI SiLEBİLİRSİNİZ. HERHANGİ BİR BEDEL ÖDEMEK ZORUNDA DEĞİLSİNİZ.
DOSYALARINIZI KURTARMAK İÇİN A$AĞIDAKi TALİMATLARI TAKİP EDİNİZ.
ÖDEME YALNIZCA BİTCOİN OLARAK ALINACAKTIR. HERHANGİ BİR SORUN İÇİN BiZiMIE ilETİSİME GECEBİLİRSİNİZ'

Previous versions of this threat family have been cracked before, and PC security researchers have released some programs that can help computer users restore their files after a Jigsaw Ransomware variant attack. However, these programs will not always help, depending on the variant being used in the attack. Because of this, prevention is key to ensure that your files are not lost permanently after a '.justice File Extension' Ransomware attack. The best prevention against threats like the '.justice File Extension' Ransomware is to have backup copies of your files stored in the cloud or an external memory device. This, together with a security program that is fully up-to-date and safe handling of unsolicited email messages can prevent attacks like the '.justice File Extension' Ransomware.

Trending

Most Viewed

Loading...