Skynet Ransomware
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Ranking: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 100 % (High) |
| Infected Computers: | 4 |
| First Seen: | July 28, 2022 |
| Last Seen: | March 1, 2023 |
| OS(es) Affected: | Windows |
The Skynet Ransomware is a destructive threat created as a variant of a previously identified ransomware named Chaos. Cybercriminals can use the Skynet Ransomware to lock the data of their victims with an uncrackable cryptographic algorithm. Affected users who wish to restore their files will be extorted for money. However, paying the demanded ransom is not a guarantee that the hackers will send the necessary decryption keys or software tools.
As part of its invasive actions, the Skynet Ransomware also will append a random 4-character string to the names of the encrypted files. The threat changes the desktop background image of the infected system and creates a text file named 'SkynetData.txt.'
Inside the text file is a ransom-demanding message. It states that the attackers are willing to decrypt a single file as a demonstration of their ability to recover the victim's data. The file must be sent to the email address provided in the note - 'ransom.data@gmail.com.' Apparently, users who initiate contact within the first 24 hours after the Skynet Ransomware attack will have to pay 50% less. However, as we said earlier, trusting the words of cybercriminals may not be wise.
The full text of the message left by Skynet Ransomware is:
'------------------------ ALL YOUR FILES ARE ENCRYPTED ------------------------
Don't worry, you can return all your files!
All your files documents, photos, databases and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees do we give to you?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information
Don't try to use third-party decrypt tools because it will destroy your files.
Discount 50% available if you contact us first 24 hours.To get this software you need write on our e-mail:
ransom.data@gmail.com.'
