Xcmb Ransomware
Xcmb Ransomware is the name of a ransomware threat that has as its main goal to make useless the files stored on a targeted computer. The Xcmb Ransomware actions are the same as other ransomware from its family - the STOP/Djvu Ransomware family - dropped onto a machine, it will start encrypting the majority of the files stored on. Then, it will demand the payment of a fee for their potential recovery. The name of the files encrypted by the Xcmb Ransomware will be changed because it will append '.Xcmb' as a file extension to them. The Xcmb Ransomware will drop a text file carrying the ransom note in every folder containing the encrypted data. The name of this text file is '_readme.txt.'
The text file presents the terms and conditions you need to follow to recover data. Here’s the text of the ransom note:
'ATTENTION!
Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-gtSNjaG9aa
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.
To get this software you need write on our e-mail:
manager@mailtemp.chReserve e-mail address to contact us:
helprestoremanager@airmail.ccYour personal ID:'
The demanded ransom amount is set at $980, as we can see on the ransom note. However, if you contact the hackers within the next 72 hours after the infection, the fee will be reduced to $490. However, even if you do pay the ransom, chances are that you will not get the decryption key because the cybercriminals may not fulfill their promises. That is why it is highly advised not to pay the ransom.
The best way to get your files back after a ransomware attack is by using an external backup. The removal of the threat from your computer should be done by a dedicated anti-malware program. Otherwise, the Xcmb Ransomware may encrypt your recently recovered files all over again.
