Kabil Ransomware
The Kabil Ransomware tries to infiltrate the computers of its victims and then lock the data found there. Indeed, the threat is capable of encrypting numerous file types, preventing users from accessing any of their personal or business-related data effectively. Cybercriminals use the locked files as leverage to extort money from their victims.
It should be noted that although the Kabil Ransomware has been classified as a variant based on the Chaos Ransomware threat, its capacity to cause damage remains significant. As part of its nefarious actions, the malware also will mark each locked file. Affected users will notice that nearly all of their files now have the '.kabil' extension. Among the changes made to the system also will be a new desktop background. The image contains a ransom note with instructions from the attackers. The same message also will be delivered as a text file named 'read_it.txt.'
Ransom Note's Overview
Reading the note left by the Kabil Ransomware reveals that the cybercriminals will only accept Bitcoin as a currency for the ransom. Furthermore, the note also states the exact amount of said ransom - users are expected to transfer $300 in Bitcoin to the crypto-wallet of the attackers. As a point of contact, the hackers have left a single email address at 'kabilransomware@protonmail.com.' Users should keep in mind that communication with people responsible for spreading malware threats is inherently risky and they could be exposing themselves to additional dangers.
The full text of the note is:
'All of your files have been encrypted
Your computer was infected with a ransomware virus. Your files have been encrypted and you won't
be able to decrypt them without our help.What can I do to get my files back?You can buy our special
decryption software, this software will allow you to recover all of your data and remove the
ransomware from your computer.Payment can be made in Bitcoin(BTC) only.
How do I pay, where do I get Bitoin?
Purchasing Bitcoin varies from country to country, you are best advised to do a quick google search
yourself to find out how to buy Bitcoin.
Many of our customers have reported these sites to be fast and reliable:
Coinmama - hxxps://www.coinmama.com Bitpanda - hxxps://www.bitpanda.comPayment informationAmount:300$ BTC
BTC:1K4QGCXbJgC7eJ3oEtq4NxZMNQr9vtMNNM
mail:kabilransomware@protonmail.com'
