Karl Ransomware

The infamous STOP/Djvu family has another addition to its vast family of ransomware. It was named the Karl Ransomware by security researchers and, like its siblings, the Karl Ransomware objective is to extort its victims by enciphering their most precious files by using a powerful encryption method and selling the software that can decrypt the affected files.

As soon as the Karl Ransomware finishes enciphering the victims' files, it will display its ransom message, which reads:

'ATTENTION!
Don’t worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-sTWdbjk1AY
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that’s price for you is $490.
Please note that you’ll never restore your data without payment.
Check your e-mail “Spam” or “Junk” folder if you don’t get answer more than 6 hours.'

This ransom message can be found in a file named '_readme.txt and, as you can see above, it asks for a $980 payment, if the victims want their files recovered. The perpetrators of the Karl Ransomware also provide two email addresses so that the victims can contact them. These email addresses are gorentos@bitmessage.ch e gerentoshelp@firemail.cc.

If you are wondering how this pest was able to infect your computer, the answer lays on unsafe Web browsing such as opening unknown email attachments, downloading cracked applications, etc. However, the people behind the Karl Ransomware also can use other, common methods of delivering their threats

If your machine was affected by the Karl Ransomware, you have some options to try to decrypt your data; the STOP Ransomware encryption technique was cracked by security experts so that you can try it; if you have backups of your data, problem solved; if not, you can try other decryption methods available on the Web, but any of these options should be used after removing the Karl Ransomware infection with a dependable anti-malware tool.