Matrix-FASTBOB Ransomware
The Matrix-FASTBOB Ransomware is an encryption ransomware Trojan that was first observed in September 2018. The Matrix-FASTBOB Ransomware is designed to make the victim's files unusable, encrypting them with an effective encryption algorithm, and then requesting a ransom payment. The payment of the Matrix-FASTBOB Ransomware ransom or an attempt to negotiate with the criminals is not a guarantee that the victims of the Matrix-FASTBOB Ransomware. They do not care about their victims; what means to them is only the money.
How the Matrix-FASTBOB Ransomware Enters a Computer
The Matrix-FASTBOB Ransomware is designed to take the victim's files hostage, using the AES and RSA encryptions. The Matrix-FASTBOB Ransomware is delivered to the victim through the use of spam email messages and corrupted online advertisements. Once the Matrix-FASTBOB Ransomware has been installed, it will encrypt the victim's files and then demand a ransom payment. The Matrix-FASTBOB Ransomware targets a wide variety of the user-generated files in its attack, which may include various media file types, documents, databases, spreadsheets and numerous others. The Matrix-FASTBOB Ransomware will mark the files it targets with a new file extension, '.FASTBOB,' which it will add to the file's name. The following are examples of the type of files that threats like the Matrix-FASTBOB Ransomware target the files below when it attacks a computer:
.jpg, .jpeg, .raw, .tif, .gif, .png, .bmp, .3dm, .max, .accdb, .db, .dbf, .mdb, .pdb, .sql, .dwg, .dxf, .cpp, .cs, .h, .php, .asp, .rb, .java, .jar, .class, .py, .js, .aaf, .aep, .aepx, .plb, .prel, .prproj, .aet, .ppj, .psd, .indd, .indl, .indt, .indb, .inx, .idml, .pmd, .xqx, .xqx, .ai, .eps, .ps, .svg, .swf, .fla, .as3, .as, .txt, .doc, .dot, .docx, .docm, .dotx, .dotm, .docb, .rtf, .wpd, .wps, .msg, .pdf, .xls, .xlt, .xlm, .xlsx, .xlsm, .xltx, .xltm, .xlsb, .xla, .xlam, .xll, .xlw, .ppt, .pot, .pps, .pptx, .pptm, .potx, .potm, .ppam, .ppsx, .ppsm, .sldx, .sldm, .wav, .mp3, .aif, .iff, .m3u, .m4u, .mid, .mpa, .wma, .ra, .avi, .mov, .mp4, .3gp, .mpeg, .3g2, .asf, .asx, .flv, .mpg, .wmv, .vob, .m3u8, .dat, .csv, .efx, .sdf, .vcf, .xml, .ses, .qbw, .qbb, .qbm, .qbi, .qbr , .cnt, .des, .v30, .qbo, .ini, .lgb, .qwc, .qbp, .aif, .qba, .tlg, .qbx, .qby , .1pa, .qpd, .txt, .set, .iif, .nd, .rtp, .tlg, .wav, .qsm, .qss, .qst, .fx0, .fx1, .mx0, .fpx, .fxr, .fim, .ptb, .ai, .pfb, .cgn, .vsd, .cdr, .cmx, .cpt, .csl, .cur, .des, .dsf, .ds4, , .drw, .eps, .ps, .prn, .gif, .pcd, .pct, .pcx, .plt, .rif, .svg, .swf, .tga, .tiff, .psp, .ttf, .wpd, .wpg, .wi, .raw, .wmf, .txt, .cal, .cpx, .shw, .clk, .cdx, .cdt, .fpx, .fmv, .img, .gem, .xcf, .pic, .mac, .met, .pp4, .pp5, .ppf, .nap, .pat, .ps, .prn, .sct, .vsd, .wk3, .wk4, .xpm, .zip, .rar.
The Matrix-FASTBOB Ransomware delivers a ransom note in the form of an RTF file named '#_#FASTBOB_README#_#.rtf,' which is dropped on the infected computer's desktop and demands that the victim contact the criminals via email.
Protecting Your Data from Threats Like the Matrix-FASTBOB Ransomware
The best protection against threats like the Matrix-FASTBOB Ransomware is to have backup copies of your files. Having file backups ensures that computer users can restore their files easily after they have become encrypted. A security program can be used to prevent the Matrix-FASTBOB Ransomware from being installed in the first place and be part of its removal process. However, the security software will generally not be able to restore any encrypted files. Because of this, backups are generally the best resource to help computer users restore their files. Unfortunately, threats like the Matrix-FASTBOB Ransomware use strong encryption methods, meaning that the files encrypted by these attacks will not be recoverable without the decryption key, which the criminals keep with them. However, paying a ransom such as the one that the Matrix-FASTBOB Ransomware demands allows the criminal groups responsible for these attacks to continue creating and distributing threats. In fact, if it becomes a common practice to refrain from paying ransomware ransoms, it is likely that these attacks would stop, since they'd cease being profitable.
