Threat Database Ransomware Redeemer Ransomware

Redeemer Ransomware

Threat Scorecard

Ranking: 15,733
Threat Level: 100 % (High)
Infected Computers: 8
First Seen: July 1, 2021
Last Seen: November 8, 2022
OS(es) Affected: Windows

A new ransomware threat has been found to be lurking in the wild. Named Redeemer by its ill-minded creators, the threat so far has not been classified as belonging to any of the already established ransomware families. Its behavior, however, sticks to that of a typical ransomware threat. 

The Redeemer Ransomware aims to infect the targeted computer, initiate an encryption routine with a strong cryptographic algorithm, and then lock the data stored on the breached device. The affected files will be rendered inaccessible and unusable. Furthermore, each encrypted file will have '.redeem' appended to its original name as a new extension. After the encryption process is completed, the Redeemer Ransomware will create a text file in every folder containing locked data. These files named 'Read Me.TXT' carry the ransom note of the threat. 

According to the instructions, the only way to restore the data is by purchasing the decryption tool and the key from the cybercriminals. Users will have to pay the ransom using the Monero (XMR) cryptocurrency. To receive the crypto-wallet address where the funds must be transferred, users are directed to contact the equilibriumfinancialsupremecy@gmail.com address, found inside the ransom note. Also in the note, users will notice a lengthy key string that must be included in the email message. 

The full set of instructions displayed in the ransom note is:

'-- Redeemer -

All your files have been encrypted using an advanced encryption algorithm. They cannot be decrypted without a decryption tool and a key.

In order to decrypt your files you will need to pay 20 XMR (Monero). After paying you will get a tool and a key to decrypt your files.
You can find more information about Monero on getmonero.org and you can buy it from localmonero.co or any other website or use any cryptocurrency exchange that has Monero listed.
WARNING: Do not modify the files, don't change their names and locations, otherwise they won't be able to be decrypted.
AFTER you obtain the required amount of XMR, contact equilibriumfinancialsupremecy@gmail.com and send the following key:
'

Related Posts

Trending

Most Viewed

Loading...