OBZ Ransomware

By CagedTech in Ransomware

Translate To:

OBZ ransomware is a malicious program that was identified by cybersecurity researchers. The ransomware threat is similar to the previously recorded U2K and MME ransomware. OBZ works by encrypting files on systems it infects and appending their filenames with an '.OBZ' extension. For example, a file initially titled 'Image1.jpg' appears as 'Image1.jpg.OBZ.' After encryption has been completed, a ransom note - typically named 'ReadMe.txt' - is created. The ransom note provides victims with instructions on how to establish contact with the attackers and pay a ransom. Apparently, threat actors want victims to visit their dedicated website hosted on the TOR network.

OBZ Ransomware hides its presence on the victims' devices by pretending to be a seemingly innocent process named 'Traffic Light.' However, victims may find that the exact name of the process they see listed in Windows Task Manager's active processes could be a different one.

It is essential for computer users to remain vigilant against the threat posed by OBZ ransomware - or any other form of malicious software - as it can have serious financial and emotional consequences if left unchecked. To ensure the safety of your data, do not open emails from unknown senders and install a reputable anti-malware program with up-to-date definitions. Additionally, regular backups should always be made and stored in a secure location outside of the network being monitored.

OBZ Ransomware's full ransom-demanding message is:

Attention!
All your files, documents, photos, databases and other important files are encrypted
The only method of recovering files is to purchase an unique decryptor. Only we can give you this decryptor and only we can recover your files.
The server with your decryptor is in a closed network TOR. You can get there by the following ways:
_______________
1. Download Tor browser - hxxps://www.torproject.org/
2. Install Tor browser
3. Open Tor Browser
4. Open link in TOR browser: hxxp://obzuqvr5424kkc4unbq2p2i67ny3zngce3tbdr37nicjqesgqcgomfqd.onion/?101VWOPRTUL
5. and open ticket
Alternate communication channel here: hxxps://yip.su/2QstD5