'.blackblock File Extension' Ransomware

The '.blackblock File Extension' Ransomware is a new release of the Globe Ransomware, a file-encrypting Trojan capable of blocking data by running it through a protected cipher. An active '.blackblock File Extension' Ransomware infection always is identifiable by the renamed and unusable files, as well as pop-up messages asking for money for restoring them. Affected PC users should attempt any of the other recovery options malware experts endorse and deploy anti-malware products for removing the '.blackblock File Extension' Ransomware.

The New Offspring of the Globe Ransomware on the Block

The RaaS (Ransomware-as-a-Service) model of Trojan campaigning continues being a major factor in the creation and deployment of new threats with close relationships to old ones, in many cases, only days or weeks apart from each other. One family, the Globe Ransomware, is seeing a particularly visible 'growth spurt' in the form of the '.blackblock File Extension' Ransomware, the '.UCRYPT File Extension' Ransomware, the '.kyra File Extension' Ransomware and others. Consistently, their payload always uses data encryption for attacking the PC and locking its contents.

The '.blackblock File Extension' Ransomware's encryption scan includes both network-mapped drives and local ones, with a particular focus on the user profile directory. After encrypting your files with a Blowfish-based algorithm (markedly divergent from the AES encoding methods that Trojans from other families prefer), the '.blackblock File Extension' Ransomware adds a personal extension, '.blackblock,' after the default extension.

Malware experts also associate the '.blackblock File Extension' Ransomware's family with automatically-loading pop-ups that the user sees after restarting Windows. These advanced HTML windows ask for differing amounts of ransom money, depending on the threat actor's configuration settings, and may provide both e-mail addresses and advice on using cryptocurrency to pay. However, the decryption process isn't automated, and the '.blackblock File Extension' Ransomware's authors may choose to take the payment without decrypting your files.

Escaping the Worst Kind of Black Mark on Your Files

To extort their victims successfully, the '.blackblock File Extension' Ransomware attacks require a lack of backups that could restore all encrypted content while eschewing any need to crack the Blowfish cipher. This family erases local backups on Windows machines, but malware experts can recommend using backups on remote services or devices for reducing the potential damages. Other PC security organizations also are releasing free decryption software, which is viable against different variants of the Globe Ransomware.

The '.blackblock File Extension' Ransomware's symptoms include easily-noticeable ones, such as a new extension on your files, desktop wallpaper hijackings and pop-ups. However, all of the above symptoms occur after the Trojan inflicts its encryption damage on your local data. Installing anti-malware products that can delete the '.blackblock File Extension' Ransomware before its payload concludes can stop this and similar threats beforehand.

As a conventional example of threat authors' new business models, the '.blackblock File Extension' Ransomware may be being distributed by third parties using exploits and hoaxes differing from previous ones. Although guarding your computer against all possible infection vectors may seem impractical, often, it's semi-passively achievable by using the right security software and maintaining naturally safe Web-surfing habits.