Threat Database Ransomware Redeemer Ransomware

Redeemer Ransomware

Threat Scorecard

Ranking: 10,896
Threat Level: 100 % (High)
Infected Computers: 118
First Seen: July 1, 2021
Last Seen: July 13, 2023
OS(es) Affected: Windows

A new ransomware threat has been found to be lurking in the wild. Named Redeemer by its ill-minded creators, the threat so far has not been classified as belonging to any of the already established ransomware families. Its behavior, however, sticks to that of a typical ransomware threat. 

The Redeemer Ransomware aims to infect the targeted computer, initiate an encryption routine with a strong cryptographic algorithm, and then lock the data stored on the breached device. The affected files will be rendered inaccessible and unusable. Furthermore, each encrypted file will have '.redeem' appended to its original name as a new extension. After the encryption process is completed, the Redeemer Ransomware will create a text file in every folder containing locked data. These files named 'Read Me.TXT' carry the ransom note of the threat. 

According to the instructions, the only way to restore the data is by purchasing the decryption tool and the key from the cybercriminals. Users will have to pay the ransom using the Monero (XMR) cryptocurrency. To receive the crypto-wallet address where the funds must be transferred, users are directed to contact the address, found inside the ransom note. Also in the note, users will notice a lengthy key string that must be included in the email message. 

The full set of instructions displayed in the ransom note is:

'-- Redeemer -

All your files have been encrypted using an advanced encryption algorithm. They cannot be decrypted without a decryption tool and a key.

In order to decrypt your files you will need to pay 20 XMR (Monero). After paying you will get a tool and a key to decrypt your files.
You can find more information about Monero on and you can buy it from or any other website or use any cryptocurrency exchange that has Monero listed.
WARNING: Do not modify the files, don't change their names and locations, otherwise they won't be able to be decrypted.
AFTER you obtain the required amount of XMR, contact and send the following key:

Related Posts


Most Viewed