CryptoShocker is a new ransomware that is currently being distributed. This ransomware will encrypt your files using AES encryption and append the “.locked” extension to the encrypted files. It will also drop a ransom note named “README.txt” which contains instructions on how to decrypt your files.
CryptoShocker is currently being spread through spam emails. The email will contain a malicious attachment that, when opened, will download and install the CryptoShocker ransomware on your computer.
CryptoShocker was first discovered on May 8th, 2017.
The biggest CryptoShocker Ransomware attack happened on May 12th, 2017. In this attack, CryptoShocker encrypted over 200,000 files in just a few hours.
CryptoShocker will primarily target the following file types:
.3gp, .7z, .apk, .avi, .bmp, .cdr, .cer, .chm, .conf, .cpp, .cs, .css, .csv, .dat ,.db,.dbf,.djvu,.doc,.docx,.dwg,.eml,.eps,.exe,.flv ,.gif,.HTML, ico,,.jpeg,,.jpg,.key,,.mkv,.mov,.mp3,.pdf,.png,.ppt ,.pptx,,.PSD,,.rar,,.rtf ,.scr,,.sln,.SQL, .txt,.vsdx,.vsd, .xls ,.xlsx,.XML, .zip.
The CryptoShocker ransomware demands a ransom of 0.5 Bitcoin, but the amount may vary depending on the victim. The ransom note also contains instructions on how to purchase Bitcoin and how to contact the attackers.
If you pay the ransom, there is no guarantee that you will get your files back. Likely, you will not get your files back. So, we do not recommend paying the ransom. Instead, we recommend that you use a backup to restore your files.
Protection
To protect yourself from CryptoShocker, you should do the following:
– Keep your antivirus up to date
– Do not open email attachments from unknown senders
– Do not click on links in email messages from unknown senders
– Back up your important files regularly
If you are infected with CryptoShocker, you should immediately disconnect your computer from the internet and then scan it with a good anti-malware program. You should also use this opportunity to backup your files to prevent data loss in the future.
How to decrypt files encrypted by CryptoShocker Ransomware?
There is no public decryption tool available for CryptoShocker ransomware. However, you may be able to use a good data recovery program to recover your files.
You can use SalvageData data recovery software to recover your files.
If you cannot decrypt your files, you can contact a data recovery service. Many companies offer this service, but we recommend that you only use a reputable company.
SalvageData has been helping people recover their data for over 10 years and has a success rate of over 96%.
Contact SalvageData experts to get help right now!
Call 24/7: +1 (800) 972-3282 or visit our website.
Recovery mode is a crucial feature for troubleshooting and restoring an iPad when it encounters…
Whether you’re a professional juggling important work documents or an individual cherishing irreplaceable memories, safeguarding…
It's not uncommon to encounter issues where an external drive is not showing up on…
When restoring your iPhone from a backup, you may discover it is corrupted or incomplete.…
Backup and remote wiping procedures are two critical components of data security and management for…
VMware is a leading virtualization and cloud computing software provider. Its core technology allows multiple…