Threat Database Ransomware 'Sitaram108@india.com Ransomware'

'Sitaram108@india.com Ransomware'

By GoldSparrow in Ransomware

The 'Sitaram108@india.com' Ransomware is part of a large ransomware family. The 'Sitaram108@india.com' Ransomware and its variants first appeared in 2016. The 'Sitaram108@india.com' Ransomware is fairly typical and similar to other countless encryption ransomware Trojan attacks that have become quite common in the last couple of years. However, the 'Sitaram108@india.com' Ransomware uses a sophisticated encryption algorithm, which means that the files encrypted by the 'Sitaram108@india.com' Ransomware cannot be decrypted without access to the decryption key. Unfortunately, a decryption utility for the files affected by the 'Sitaram108@india.com' Ransomware and its variants does not exist currently. This is one of the ways in which ransomware Trojans are more effective than many other threat infections; even if the 'Sitaram108@india.com' Ransomware is removed with an anti-malware program, the victim's files will remain encrypted and inaccessible. The best protection against the 'Sitaram108@india.com' Ransomware and its variants is to make sure that you backup all files on your computer on an off-site device.

The Ransom Fee Demanded by the 'Sitaram108@india.com' Ransomware can be Very High

The amount that the 'Sitaram108@india.com' Ransomware demands from its victims can vary from attack to attack. In most cases, the amount is somewhere between 1 and 3 BitCoins ($600 to $1800 USD). However, the 'Sitaram108@india.com' Ransomware attacks seem to target enterprise networks, and the 'Sitaram108@india.com' Ransomware attacks are especially devastating when affecting servers belonging to businesses. Since the damages can be quite extensive in these cases, the people responsible for the 'Sitaram108@india.com' Ransomware may adjust the ransom amount depending on the profile of the victim and the extent of the infection.

There are several ways in which the 'Sitaram108@india.com' Ransomware can be installed on a computer. The con artists responsible for the 'Sitaram108@india.com' Ransomware may hack directly into the targeted computer (strong passwords and robust security measures can help prevent this). The 'Sitaram108@india.com' Ransomware, like most encryption ransomware Trojans, also may be delivered using corrupted email attachments. It is important to educate all people in a company about the danger of opening unsolicited email attachments and to always confirm the source through a different method if an attachment seems suspicious.

To carry out its attack, the 'Sitaram108@india.com' Ransomware will search for certain file extensions. Whenever the 'Sitaram108@india.com' Ransomware finds files with these extensions on the victim's computer, the 'Sitaram108@india.com' Ransomware uses its encryption algorithm to encrypt the file. A list containing some of the file types that are targeted by the 'Sitaram108@india.com' Ransomware and other variants in this threatening encryption ransomware family is showed below:

.odc, .odm, .odp, .ods, .odt, .docm, .docx, .doc, .odb, .mp4, sql, .7z, .m4a, .rar, .wma, .gdb, .tax, .pkpass, .bc6, .bc7, .avi, .wmv, .csv, .d3dbsp, .zip, .sie, .sum, .ibank, .t13, .t12, .qdf, .bkp, .qic, .bkf, .sidn, .sidd, .mddata, .itl, .itdb, .icxs, .hvpl, .hplg, .hkdb, .mdbackup, .syncdb, .gho, .cas, .svg, .map, .wmo, .itm, .sb, .fos, .mov, .vdf, .ztmp, .sis, .sid, .ncf, .menu, .layout, .dmp, .blob, .esm, .vcf, .vtf, .dazip, .fpk, .mlx, .kf, .iwd, .vpk, .tor, .psk, .rim, .w3x, .fsh, .ntl, .arch00, .lvl, .snx, .cfr, .ff, .vpp_pc, .lrf, .m2, .mcmeta, .vfs0, .mpqge, .kdb, .db0, .dba, .rofl, .hkx, .bar, .upk, .das, .iwi, .litemod, .asset, .forge, .ltx, .bsa, .apk, .re4, .sav, .lbf, .slm, .bik, .epk, .rgss3a, .pak, .big, wallet, .wotreplay, .xxx, .desc, .py, .m3u, .flv, .js, .css, .rb, .png, .jpeg, .txt, .p7c, .p7b, .p12, .pfx, .pem, .crt, .cer, .der, .x3f, .srw, .pef, .ptx, .r3d, .rw2, .rwl, .raw, .raf, .orf, .nrw, .mrwref, .mef, .erf, .kdc, .dcr, .cr2, .crw, .bay, .sr2, .srf, .arw, .3fr, .dng, .jpe, .jpg, .cdr, .indd, .ai, .eps, .pdf, .pdd, .psd, .dbf, .mdf, .wb2, .rtf, .wpd, .dxg, .xf, .dwg, .pst, .accdb, .mdb, .pptm, .pptx, .ppt, .xlk, .xlsb, .xlsm, .xlsx, .xls, .wps.

After encrypting a file, the 'Sitaram108@india.com' Ransomware will drop a text note in that file's directory. The displayed text file contains information on how to contact the con artists responsible for this attack. The 'Sitaram108@india.com' Ransomware also will change the infected computer's Desktop picture to display the same ransom note over a colorful background.

Trending

Most Viewed

Loading...