AL8G Ransomware

The AL8G Ransomware is a file-locking Trojan that's a variant on AES-Matrix Ransomware. The AL8G Ransomware can lock files on a computer and keep them from opening by encrypting their data, which usually is irreversible without the attacker's help. Anti-malware programs should protect digital media by blocking this threat before its installation, and if it's necessary may uninstall the AL8G Ransomware.

An Underutilized Trojan Family Gets a Little Larger by the Week

The AES-Matrix Ransomware is far from the most abundant Trojan family that uses encryption for making money, but it gets its intended job done. A new version, the AL8G Ransomware, is similar to another campaign stylistically, that of AG88G Ransomware. However, this family stretches back to 2017 with much earlier cases, like the Matrix-ITLOCK Ransomware, the Matrix-NOBAD Ransomware, and the 2019's 'pedantback@protonmail.com' Ransomware.

The AL8G Ransomware doesn't change many features from the previous releases out of this family. It uses AES encryption, as per the family's name, for locking pictures, documents, and other files on Windows users' drives. This attack includes a full renaming mechanism that replaces the previous name with an e-mail address, a random string, and the 'AL8G' extension. In doing so, it can hinder identifying which content is a hostage.

As usual, malware researchers also point out the use of living-off-the-land utilities like the Windows CMD tool. Most of its changes are desktop wallpaper-related, for displaying a supplementary warning image. The majority of details for ransoming files are in the AL8G Ransomware's RTF document, a ransom note that doesn't give an upfront price for the victim's media.

Prepping for Another Brush with the Matrix

Since malware researchers aren't confirming the AL8G Ransomware's current infection exploits, users should rely on long-proven techniques for protecting their media before any attacks. Avoidance of illegal content like game cracks or stolen movies can limit exposure to file-locking Trojans' installers. Turning off JavaScript and Flash, and combatting vulnerabilities with security patches, will limit other drive-by-download opportunities. Users should be highly cautious around e-mail attachments and use passwords that aren't weak against brute-forcing.

Most AES-Matrix Ransomware payments are lower than typical for a Ransomware-as-a-Service, but, still, hold no promises of file recovery. Users with anything valuable in terms of documents, pictures, music, and other media, should always keep copies of their work on an external device. This essential precaution removes all bargaining leverage from the AL8G Ransomware infections.

The AL8G Ransomware is another step forward for AES-Matrix Ransomware, but in some ways, it's pacing in place. There's little to fear from a Trojan that attacks files as long as one saves data with a recovery plan in mind at all times.