hello. This is White Defender.
Ransomware can be dealt with if you prevent it in advance.
White Defender is an anti-ransomware solution that can protect against ransomware in real time. thank you안녕하세요. 화이트디펜더입니다.
This is a video of White Defender responding to ransomware threats.
What is Afire Ransomware?
The malware analyzed by WhiteDefender, which is researching and developing ransomware security, is Afire ransomware.
Afire ransomware encrypts all file data and makes it inaccessible. For example, a file named "photo.jpg" will be changed to "photo.jpg.afire", and "sales.xlsx" will be changed to "sales.xlsx.afire".
Once this attack process is complete, a ransom note with the title "Restore.txt" will be created in every directory containing the file.
This ransom note explains how to purchase a decryption tool or contact the attackers.
Ransom Note Overview
All important data is encrypted in the ransom note. To obtain the decryption key to decrypt and recover file data, contact two email addresses: mbi.pentesting@keemail.me and hellomydata@onionmail.org. We are providing contact information so that you can do so. After contacting you, it appears that you will be asked to pay for the decryption tool.
A ransom note is a note containing a requirement to follow these instructions.
is to use a reliable anti-ransomware program.
Keep your security software up to date.