Threat Database Ransomware Wnbe Ransomware

Wnbe Ransomware

The goal of the Wnbe Ransomware is to infiltrate targeted computers and then lock the files stored there with an uncrackable encryption algorithm. As part of the process, the threat also will append '.wnbe' to the affected files as a new extension. The Wnbe Ransomware is a new variant of the Wannabe Ransomware threat that has been observed in the wild.

The Wnbe Ransomware will leave instructions for its victims in two different places. First, the threat will change the default desktop wallpaper of the breached device with one of its own. The new wallpaper image will display a brief message from the hackers. However, the proper ransom note will be delivered via a text file named 'read_instructions.txt.'

Demands Overview

Reading the wallpaper simply tells the victims of the Wnbe Ransomware to find and check the instructions in the text file. Indeed, the important details are all contained there. The attackers state that they want to be paid a ransom of $26.65. The transactions must be carried out using the Bitcoin cryptocurrency. In exchange, the attackers promise to send the affected users a specialized software tool that will decrypt all of the locked files. However, to get the tool, victims will need to send proof of paying the ransom to the email of the hackers - 'anenomous31@gmail.com.'

The full text of the ransom note is:

'Oops! Your Files has been hijacked!

All of your files have been encrypted
Your computer was infected with Wannabe Ransomware. Your files have been encrypted and you won't
be able to decrypt them without our help.What can I do to get my files back?You can buy our special
decryption software, this software will allow you to recover all of your data and remove the
ransomware from your computer.The price for the software is $26.65. Payment can be made in Bitcoin only.
How do I pay, where do I get Bitcoin?
Purchasing Bitcoin varies from country to country, you are best advised to do a quick google search
yourself to find out how to buy Bitcoin.
Many of our customers have reported these sites to be fast and reliable:
Coinmama - hxxps://www.coinmama.com
Bitpanda - hxxps://www.bitpanda.com

Payment information Amount: 0.00043 BTC
Bitcoin Address:

If you're finished paying the amount please send us your proof that you paid in the provided email
below in order for us to send the decryption tool to your email address.

Email Address: anenomous31@gmail.com

The message in the wallpaper is:

Oops! your files has been locked up

If you want your files back please read the guidelines that can be found at "read_instructions.txt" thank you.'

SpyHunter Detects & Remove Wnbe Ransomware

File System Details

Wnbe Ransomware may create the following file(s):
# File Name MD5 Detections
1. file.exe d98ccf93cd8f7fe859e9a05c5c6457cb 0
2. file.exe 7f700e252588154a4857f99449f4530e 0

Trending

Most Viewed

Loading...