Fantom is the ransomware that was first seen in the wild in late 2019. Fantom uses AES-256 and RSA-2048 encryption to encrypt victims' files and appends the ".fantom" extension to them. Once Fantom has encrypted a victim's files, it will display a ransom note that instructs the victim on how to pay the ransom and decrypt their files.

How much is the ransom?

The Fantom Ransomware attackers demand a ransom of 1 Bitcoin, but the amount may vary depending on the victim.

How do Fantom Ransomware attackers distribute the ransomware?

They distribute Fantom Ransomware through email phishing campaigns. Attackers will send emails that appear to be from a legitimate source, such as a company or organization. The email will contain an attachment or link that, when clicked, will download and install Fantom Ransomware on the victim's computer.

What was the biggest Fantom Ransomware attack?

The Fantom Ransomware attack on the City of Baltimore was one of the biggest Fantom Ransomware attacks. The Fantom Ransomware encrypted the City of Baltimore's files and demanded a ransom of 13 Bitcoins, which is equivalent to about $100,000.

Protection

To protect against Fantom and other types of ransomware, it is important to have a good backup strategy in place. This will ensure that you have a copy of your files that can be restored if your computer is infected with Fantom Ransomware or any other type of malware. In addition, it is important to practice safe computing habits, such as not clicking on links or attachments from unknown sources, and keeping your computer and software up-to-date with the latest security patches.

What should victims of Fantom Ransomware do?

If you are a victim of Fantom Ransomware, we recommend that you do not pay the ransom. There is no guarantee that you will get your files back even if you do pay the ransom, and you may be supporting the Fantom Ransomware attackers' future attacks. Instead, we recommend that you focus on Fantom Ransomware removal and Fantom Ransomware recovery. Fantom Ransomware removal can be performed with an anti-malware program. Once Fantom has been removed, you can then attempt to recover your files from a backup or using file recovery software.We built SalvageData data recovery software to help you.

Is there a public decryption tool?

No, there is not a Fantom Ransomware decryption tool available at this time. Fantom Ransomware uses strong encryption, which makes it very difficult to decrypt files without the ciphertext (private key).

Contact a data recovery service

If you cannot remove Fantom Ransomware or decrypt your files, we recommend that you contact a data recovery service. Data recovery services have the tools and expertise to recover files from Fantom Ransomware and other types of ransomware.SalvageData is an industry-leading data recovery company with over 15 years of experience. We offer a free consultation to Fantom Ransomware victims and can help you recover your files.

How to report Fantom Ransomware?

If Fantom Ransomware has infected your computer, we recommend that you report it to the FBI's Internet Crime Complaint Center (IC3). You can also report Fantom Ransomware to SalvageData to help us track this ransomware and potentially help other Fantom Ransomware victims.