Home Malware Programs Ransomware '.jamper File Extension' Ransomware

'.jamper File Extension' Ransomware

Posted: March 15, 2019

The '.jamper File Extension' Ransomware is a file-locking Trojan that can block various formats of data on your PC, such as pictures, documents or program executables. While blocking them, the '.jamper File Extension' Ransomware adds its extension to their names, as well as creates a text ransoming message for the criminal's unlocking service. The users should uninstall the '.jamper File Extension' Ransomware with the anti-malware solution of their choice, before using a backup or seeking decryption assistance from members of the PC security industry.

This Trojan isn't Discriminating in Its Hostages

Nearly all file-locker Trojans, or threats that use encryption or archive compression for taking data hostage, are careful about limiting their attacks to no more than the lowest-hanging fruit: media content like text documents, pictures, and other files with information that aren't critical to the health of any programs. Sometimes, however, whether due to loose encryption standards or intentionally more destructive strategizing, a Trojan will buck this trend. Such is the case with the recently-identifiable '.jamper File Extension' Ransomware.

The '.jamper File Extension' Ransomware is out in the wild circulating among North American victims, at a minimum, and, like most of its kind, is a Windows program. The '.jamper File Extension' Ransomware uses file-by-file-based encryption with an unknown algorithm for blocking media. Although malware researchers haven't ascertained a complete list of the files that it blocks, this attack includes, very unusually, program executables (EXE), which could prevent the user's accessing any number of applications, depending on which folders it affects. Besides the encryption, the '.jamper File Extension' Ransomware also may be prepending an additional marker into the start of each file's internal data for later identifying.

Unsurprisingly, the '.jamper File Extension' Ransomware changes the names of the above content by inserting extra 'jamper' extensions (for instance, 'installer.exe.jamper'), – which shouldn't be confused with the file marker feature, which doesn't target the external filename. The '.jamper File Extension' Ransomware also creates a Notepad message that malware researchers occasionally find throughout various file-locker Trojans' campaigns, with updated ransoming addresses. A minor feature of note here is the criminals' preference for the anonymity-protecting Countermail service, which malware experts, generally, don't see in competing Trojans' extortion efforts.

The Best Anti-Terrorism Protection for Your Programs

Taking files hostage is an extremely prominent tactic among threat actors today, but it's rare that a Trojan like the '.jamper File Extension' Ransomware will risk blocking programs indiscriminately, along with another media content. In a worst-case scenario, the '.jamper File Extension' Ransomware could block crucial Windows components like Explorer, thereby preventing the users from accessing the UI or availing themselves of various security tools. In such cases, a full repair of the OS and reinstalling all affected programs may be mandatory.

While the users could take a risk by paying the non-specific ransom, the '.jamper File Extension' Ransomware's threat actors may not provide a service in exchange and could demand payment through means, like cryptocurrency, without any consumer protections. Until malware analysts can examine the '.jamper File Extension' Ransomware's cryptographic feature in more detail, they only can encourage backing up work onto other devices for the safety of your files. Anti-malware tools of most brands should, however, delete the '.jamper File Extension' Ransomware promptly as being a danger to your computer.

The '.jamper File Extension' Ransomware attacks are using vectors for infections that have yet to identify themselves to the public at large. American Windows users can watch for suspicious e-mail attachments, website update prompts, and torrent downloads for some anticipated means of 'catching' a file-locking Trojan just like this one.

Loading...