Qlkm Ransomware
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Ranking: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 90 % (High) |
| Infected Computers: | 57 |
| First Seen: | July 24, 2009 |
| Last Seen: | January 21, 2021 |
| OS(es) Affected: | Windows |
The Qlkm Ransomware is one of the latest threats belonging to the prolific STOP/Djvu Ransomware family. Being a simple variant of the infamous STOP/Djvu Ransomware it shows little to no deviation from what is considered the typical behavior of a representative of this family. This, however, in no way means that the Qlkm Ransomware is not a threat capable of causing severe damage to any computer system it manages to infect.
First, the Qlkm Ransomware initiates its encryption process that leverages an uncrackable cryptographic algorithm to 'lock' all of the user's files stored on the system effectively. Affected files will be rendered both inaccessible and unusable. The threat will append '.qlkm' as a new extension to the original name of every file it encrypts. At the same time, it will create text files named '_readme.txt' in each folder containing locked data. These text files carry the ransom note with instructions for the victims.
According to the note, victims of the Qlkm Ransomware are expected to initiate communication with the hackers by sending an email message to 'helpmanager@mail.ch' or to the reserve address at 'restoremanager@airmail.cc.' A single file can be attached to the email to be decrypted for free. As for the amount of the ransom demanded by the cybercriminals, the note sets the price at $980. If contact is made in the first 72 hours following the ransomware infection, however, the hackers 'promise' to slash the price in half to $490.
It is never a good idea to send any amount of money to the people responsible for unleashing malware threats. There is no assurance that they will keep their end of the deal.
The full text of the ransom note dropped by the Qlkm Ransomware is:
'ATTENTION!
Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-ue986XUmqV
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.
To get this software you need write on our e-mail:
helpmanager@mail.ch
Reserve e-mail address to contact us:
restoremanager@airmail.cc
Your personal ID:'
