Home Malware Programs Ransomware Cryptedx Ransomware

Cryptedx Ransomware

Posted: January 9, 2018

Threat Metric

Threat Level: 8/10
Infected PCs: 86
First Seen: May 8, 2023
OS(es) Affected: Windows

The Cryptedx Ransomware is a Trojan created by the generator toolkit from the Xorist Ransomware family. Just like other Trojans made by that program, the Cryptedx Ransomware locks the media on your PC with encryption and generates multiple formats of messages that ask the victim to enter into ransoming negotiations for the key. Customized decryption solutions often can recover data that this Trojan locks, and removing the Cryptedx Ransomware with any anti-malware tool is recommendable for the further safety of your saved files.

RaaS Stays in Play for 2018

Threat actors remain happy to pay others for the privilege of creating their personalized versions of different types of malicious software, even including ones with notable vulnerabilities and limitations, such as Xorist Ransomware. The newest member of that family, the Cryptedx Ransomware, is running the now-traditional ransoming demands for a cryptocurrency and uses different formats for guaranteeing that the victims see its message. However, as usual, malware experts confirm that the data-encrypting attacks are the primary motivation for paying.

The Cryptedx Ransomware may use either an XOR or TEA-based cipher to block various formats of media, ranging from pictures and documents to spreadsheets or archives. Although the Trojan doesn't damage any critical files, such as the operating system, the Cryptedx Ransomware does keep the user from opening their media-based content. The '.cryptedx' extension is a signature symptom of content that the Trojan is blocking, and removing this extension doesn't affect the legibility of the file's data.

The threat actors administrating this Trojan's campaign are delivering ransoming messages by three methods: a Notepad file, an image that the Cryptedx Ransomware locks to the wallpaper, and a Windows error notification. Unlike the earliest versions of the Xorist Ransomware, malware researchers confirm that the Cryptedx Ransomware uses Bitcoin payments for its finances. However, any victims should keep in mind that paying doesn't provide any guarantee of receiving a file-unlocking key.

'X'ing out Your Cryptedx Ransomware Problems

Ransomware-as-a-Service Trojans like the Cryptedx Ransomware can experience distribution by different means, depending on the preferences of the people paying to create and deploy them. Some of the most usual ones that malware experts see in file-locking campaigns include e-mail attachments, mislabeled torrent downloads, and manual installations after the compromise of a server via brute-force software. Keeping secure passwords and having anti-malware products with automated, file-scanning features can disable most infection vectors.

Free decryption of the Xorist Ransomware Trojans sometimes is a possibility but may require the assistance of an encryption specialist within the cybersecurity industry. In addition to that option, malware researchers also recommend preserving updated backups externally, which lets any user restore their files without a need to pay a ransom. Due to the ongoing security risks associated with this file-locking Trojan, uninstalling the Cryptedx Ransomware should take place with the help of a suitable anti-malware product.

The Cryptedx Ransomware is a recent addition to a family with many members and live campaigns, including the AAC Ransomware, the Blocked2 Ransomware, the HELLO Ransomware, the XRat Ransomware and the Zixer2 Ransomware. With the ongoing success of RaaS Trojans, users need to keep strict control over how they choose to preserve anything that's vulnerable to an encryption attack correspondingly.

Loading...