'raphaeldupon@aol.com' Ransomware
The 'raphaeldupon@aol.com' Ransomware Trojan is an encryption ransomware Trojan that is commonly distributed via corrupted spam email attachments. The 'raphaeldupon@aol.com' Ransomware seems to be a variant of the Dharma Ransomware family and may have been created using a ransomware builder kit offered as part of a RaaS (Ransomware as a Service) platform. The 'raphaeldupon@aol.com' Ransomware was released in April 2019.
Why the 'raphaeldupon@aol.com' Ransomware Encrypts the PC Users Files
The 'raphaeldupon@aol.com' Ransomware Trojan targets the user-generated files, encrypting them using the AES and RSA encryptions. The 'raphaeldupon@aol.com' Ransomware Trojan targets media files, documents, databases, and numerous others, encrypts them, adding the new file extension '_raphaeldupon@aol.com_.btc' to each file's name, and removing any backups on the infected computer. The following are examples of the files that threats like the 'raphaeldupon@aol.com' Ransomware target in these attacks:
.jpg, .jpeg, .raw, .tif, .gif, .png, .bmp, .3dm, .max, .accdb, .db, .dbf, .mdb, .pdb, .sql, .dwg, .dxf, .cpp, .cs, .h, .php, .asp, .rb, .java, .jar, .class, .py, .js, .aaf, .aep, .aepx, .plb, .prel, .prproj, .aet, .ppj, .psd, .indd, .indl, .indt, .indb, .inx, .idml, .pmd, .xqx, .xqx, .ai, .eps, .ps, .svg, .swf, .fla, .as3, .as, .txt, .doc, .dot, .docx, .docm, .dotx, .dotm, .docb, .rtf, .wpd, .wps, .msg, .pdf, .xls, .xlt, .xlm, .xlsx, .xlsm, .xltx, .xltm, .xlsb, .xla, .xlam, .xll, .xlw, .ppt, .pot, .pps, .pptx, .pptm, .potx, .potm, .ppam, .ppsx, .ppsm, .sldx, .sldm, .wav, .mp3, .aif, .iff, .m3u, .m4u, .mid, .mpa, .wma, .ra, .avi, .mov, .mp4, .3gp, .mpeg, .3g2, .asf, .asx, .flv, .mpg, .wmv, .vob, .m3u8, .dat, .csv, .efx, .sdf, .vcf, .xml, .ses, .qbw, .qbb, .qbm, .qbi, .qbr , .cnt, .des, .v30, .qbo, .ini, .lgb, .qwc, .qbp, .aif, .qba, .tlg, .qbx, .qby , .1pa, .qpd, .txt, .set, .iif, .nd, .rtp, .tlg, .wav, .qsm, .qss, .qst, .fx0, .fx1, .mx0, .fpx, .fxr, .fim, .ptb, .ai, .pfb, .cgn, .vsd, .cdr, .cmx, .cpt, .csl, .cur, .des, .dsf, .ds4, , .drw, .eps, .ps, .prn, .gif, .pcd, .pct, .pcx, .plt, .rif, .svg, .swf, .tga, .tiff, .psp, .ttf, .wpd, .wpg, .wi, .raw, .wmf, .txt, .cal, .cpx, .shw, .clk, .cdx, .cdt, .fpx, .fmv, .img, .gem, .xcf, .pic, .mac, .met, .pp4, .pp5, .ppf, .nap, .pat, .ps, .prn, .sct, .vsd, .wk3, .wk4, .xpm, .zip, .rar.
The 'raphaeldupon@aol.com' Ransomware delivers a ransom note once the victim's files have been encrypted. The 'raphaeldupon@aol.com' Ransomware's ransom note takes the form of a text file named 'FILES ENCRYPTED.txt' containing the following message:
<'all your data has been locked us You want to return? write email raphaeldupon@aol.com'
Computer users must avoid contacting the criminals. Typically, they will ask for a ransom of several hundred US dollars in exchange for the decryption key. However, contacting the criminals results in the return of the affected files rarely and increases the risk of additional infections greatly since it shows the criminals a willingness to pay the ransom and cooperate with the attackers.
Protecting Your Data from Threats Like the 'raphaeldupon@aol.com' Ransomware
The best protection against threats like the 'raphaeldupon@aol.com' Ransomware is to have file backups stored on the cloud or another external device. Apart from file backups, computer users should use a security program that is fully up-to-date. Having file backups ensures that computer users can restore any data encrypted by attacks like the 'raphaeldupon@aol.com' Ransomware without having to negotiate with criminals or taking any similar risks. Unfortunately, the 'raphaeldupon@aol.com' Ransomware uses quite strong encryption, and it is generally close to impossible to restore data encrypted by these ransomware Trojans. Because of this, backups are the best protection. Apart from file backups, a security application that is fully up-to-date can be used to intercept and remove the 'raphaeldupon@aol.com' Ransomware Trojan itself.
