Kkll Ransomware
The Kkll Ransomware is a brand-new copy of the notorious STOP Ransomware. Cybersecurity experts have spotted over 200 variants of the STOP Ransomware in 2019 alone. This makes the STOP Ransomware one of the most active ransomware families around.
Propagation and Encryption
The Kkll Ransomware may be spread via fake social media posts and pages, malvertising operations, torrent trackers, software downloads and updates, etc. The creators of the Kkll Ransomware also may have opted to use spam email campaigns to spread this threat. If the attackers are using phishing emails to spread the Kkll Ransomware, they would either contain a corrupted link or an infected attachment. If the Kkll Ransomware manages to breach your system, it will scan your files and locate the data that is considered to be of interest. The Kkll Ransomware likely targets .doc, .docx, .pdf, .png, .jpg, .jpeg, .mp3, .mp4, .mov, .gif, .xls, .xlsx, ppt, .pptx, .rar, .zip, etc. The Kkll Ransomware applies an encryption algorithm to lock the targeted data. After the encryption process has been completed, the names of all the affected files will be changed because the Kkll Ransomware adds a '.kkll' extension. For example, a file named 'chewing-gum.mp3' originally will be renamed to 'chewing-gum.mp3.kkll.'
The Ransom Note
The Kkll Ransomware would drop its ransom note on the desktop of the user. The name of the note is '_readme.txt,' and it contains the ransom message of the attackers. The note states that:
- The ransom fee is set at $980, but users who get in touch with the attackers within 72 hours would have to pay only half the price - $490.
- The attackers are willing to decrypt 1-2 files free of charge.
- The contact details are ‘helpmanager@mail.ch' and ‘restoremanager@firemail.cc.'
There is no decryption tool available for free for any of the STOP Ransomware variants, including the Kkll Ransomware. There is no advantage in paying the ransom fee as you may not be provided with the decryption key you need. Eliminate the Kkll Ransomware from your system using a trustworthy, modern anti-malware suite.
