Loading...
201 file extensions
File extensions used by various ransomware that rename the original suffix after the files are encrypted
Ransomware as a concept is nothing new, and first one dates back to 1989 and was known as "AIDS". However, in recent years, this type of cyber attack increased in its intensity and nowadays cryptovirology researchers find new types or versions of ransomware every week.
The concept of ransomware basically is to covertly install malware that encrypts the victim's files and then requests a ransom payment in return for the decryption key that is needed to recover the encrypted files. However, this quickly changes and malware designers (well thieves really) come with more sophisticated ways of ransomware distribution and infection mechanisms.
Bitcoins seem to be preferred ransom choice nowadays, because it is impossible to track the recipients.
One important thing to say is that there is no guarantee that you will get your files back, even if you pay the ransom and indeed many ransomware are just pure and evil scams.
Typical ransomware encrypts user's files and changes the file suffix to something else, probably so the victim can quickly see which types of files were affected. However, this trend quickly changes and "modern" ransomware often use randomized file extension or even remove the extension completely so it is harder for the user to recognize the type of infection.
The top commonly encountered ransomware families include Teslacrypt (.micro), CTB-Locker and Cryptowall (.cryptowall, .ccc) and Locky (.locky, .zepto).
201 file extensions
No extensions match your filter.