FS0ciety Ransomware is a new type of ransomware that has been designed to target businesses and organizations. This ransomware is particularly dangerous because it uses a sophisticated encryption algorithm that makes it very difficult to decrypt the encrypted files. In addition, FS0ciety Ransomware also deletes the shadow copies of the files, which makes it even more difficult to recover the data.

History

FS0ciety Ransomware was first discovered by malware researcher Michael Gillespie on May 17th, 2017. The ransomware was being distributed via a phishing email that claimed to be from DHL. The email contained a malicious attachment that would infect the computer if it was opened. Once the computer was infected, FS0ciety Ransomware would encrypt various types of files using a strong encryption algorithm. After the files were encrypted, the FS0ciety Ransomware would display a ransom note that demanded a payment of 2 Bitcoins to decrypt the files.

What encryption algorithm does FS0ciety Ransomware use?

FS0ciety Ransomware uses the RSA-2048 encryption algorithm that many ransomware families in the past have used, such as Locky Ransomware and CryptXXX Ransomware.

What types of files does FS0ciety Ransomware encrypt?

FS0ciety Ransomware will encrypt various types of files, including: .doc, .docx, .xls, .ppt, .pdf, .jpg, and .dwg.

Protection

To protect your computer from FS0ciety and other types of ransomware, you should:- Use a reputable antivirus program and keep it up to date.- Be careful when opening email attachments, even if they appear to be from a trusted sender.- Do not download programs or files from untrustworthy websites.- Keep your operating system and software up to date.- Use a reliable firewall.- Use caution when clicking on links in email messages and instant messages.- Do not disclose personal information via email messages or instant messages.

How do I know that attackers infected my computer?

If they infected you with FS0ciety Ransomware, you will see a ransom note that looks like the following:All of your files have been encrypted!Your personal ID:xxxxxxIn addition to the ransom note, you will also see that they have renamed all of your files and have the .fs0ciety extension.

What should I do?

If FS0ciety Ransomware encrypted your files, you should NOT pay the ransom. There is no guarantee that paying the ransom will decrypt your files. In addition, by paying the ransom, you would be supporting the attackers' business model and encouraging them to continue their malicious activity. Instead, you should focus on restoring your files from a backup. If you do not have a backup, you may be able to use a data recovery program to recover some of your files.We built SalvageData data recovery software to help you.

Is there a public decryption tool?

No, there is not a public decryption tool available for FS0ciety Ransomware.

Contact a data recovery service

If you want to attempt to decrypt your files, you can contact a data recovery service. Some data recovery services have been able to decrypt files encrypted by FS0ciety Ransomware. The cost of these services varies, but they typically charge around $500-$1,000.If you are looking for a data recovery service, you should:- Research the service to make sure they are reputable.- Make sure they have experience decrypting files encrypted by FS0ciety Ransomware.- Ask if they offer a free evaluation. This will allow you to send them a sample of your encrypted files to see if they can decrypt them before you pay for the service.Contact SalvageData Recovery experts. We offer a free evaluation, so you can send us a sample of your encrypted files to see if we can decrypt them before you pay for the service.

How much does it cost?

The cost of our data recovery services varies depending on the type of encryption used and the severity of the damage. However, our prices start at $500.

How long does it take?

The time it takes to decrypt your files depends on the type of encryption used and the severity of the damage. However, in most cases, we can decrypt files within 1-2 days.

What is the success rate?

Our success rate in decrypting files encrypted by FS0ciety Ransomware and other types of ransomware is high. In most cases, we can decrypt all the files.