AL8G Ransomware

AL8G Ransomware Description

The AL8G Ransomware is a file-locking Trojan that's a variant on AES-Matrix Ransomware. The AL8G Ransomware can lock files on a computer and keep them from opening by encrypting their data, which usually is irreversible without the attacker's help. Anti-malware programs should protect digital media by blocking this threat before its installation, and if it's necessary may uninstall the AL8G Ransomware.

An Underutilized Trojan Family Gets a Little Larger by the Week

The AES-Matrix Ransomware is far from the most abundant Trojan family that uses encryption for making money, but it gets its intended job done. A new version, the AL8G Ransomware, is similar to another campaign stylistically, that of AG88G Ransomware. However, this family stretches back to 2017 with much earlier cases, like the Matrix-ITLOCK Ransomware, the Matrix-NOBAD Ransomware, and the 2019's '' Ransomware.

The AL8G Ransomware doesn't change many features from the previous releases out of this family. It uses AES encryption, as per the family's name, for locking pictures, documents, and other files on Windows users' drives. This attack includes a full renaming mechanism that replaces the previous name with an e-mail address, a random string, and the 'AL8G' extension. In doing so, it can hinder identifying which content is a hostage.

As usual, malware researchers also point out the use of living-off-the-land utilities like the Windows CMD tool. Most of its changes are desktop wallpaper-related, for displaying a supplementary warning image. The majority of details for ransoming files are in the AL8G Ransomware's RTF document, a ransom note that doesn't give an upfront price for the victim's media.

Prepping for Another Brush with the Matrix

Since malware researchers aren't confirming the AL8G Ransomware's current infection exploits, users should rely on long-proven techniques for protecting their media before any attacks. Avoidance of illegal content like game cracks or stolen movies can limit exposure to file-locking Trojans' installers. Turning off JavaScript and Flash, and combatting vulnerabilities with security patches, will limit other drive-by-download opportunities. Users should be highly cautious around e-mail attachments and use passwords that aren't weak against brute-forcing.

Most AES-Matrix Ransomware payments are lower than typical for a Ransomware-as-a-Service, but, still, hold no promises of file recovery. Users with anything valuable in terms of documents, pictures, music, and other media, should always keep copies of their work on an external device. This essential precaution removes all bargaining leverage from the AL8G Ransomware infections.

The AL8G Ransomware is another step forward for AES-Matrix Ransomware, but in some ways, it's pacing in place. There's little to fear from a Trojan that attacks files as long as one saves data with a recovery plan in mind at all times.

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to AL8G Ransomware may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria.

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Posted: July 22, 2020
Home Malware Programs Ransomware AL8G Ransomware

Leave a Reply

Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter. If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.