Home Malware Programs Ransomware EncryptServer2018 Ransomware

EncryptServer2018 Ransomware

Posted: January 16, 2018

Threat Metric

Threat Level: 2/10
Infected PCs: 59
First Seen: June 6, 2023
Last Seen: October 17, 2024
OS(es) Affected: Windows

The EncryptServer2018 Ransomware is a file-encryption Trojan whose primary targets are Web servers. Due to the nature of the attack, it is likely that the EncryptServer2018 Ransomware is not being distributed via fraudulent e-mail messages and, instead, its authors have opted to rely on vulnerable RDP software or outdated and flawed software. Regardless of the infection vector, the result of the EncryptServer2018 Ransomware's attack is always the same – a large number of encrypted files whose names have been encoded, and their file extension has been set to '.2018'.

The EncryptServer2018 Ransomware will then create the file 'Attention!!!!.txt,' which contains a short message meant for the victim. The instructions there state that the user's data has been encrypted securely and the only road to recovery is to seek assistance from the attacker. The authors of the EncryptServer2018 Ransomware uses two methods to get in touch with their victims – either the e-mail tornado_777@aol.com or the BitMessage ID 2cXXgKAo8HzUmijt8KMywZYHm8xDHhxwZg@bitmessage.ch. Surprisingly, the author has not specified how much money the victims need to pay, and this may mean that the ransom sum will vary depending on the amount of damage caused.

As usual, the attackers want to receive the money via a Bitcoin transaction. They also offer to provide victims with proof that they are in possession of a decryption tool by unlocking three of their files for free. While we advise you to take advantage of this offer, you can rest assured that you should not agree to pay any money to the people who took your files hostage. There's no guarantee that they'll keep their end of the deal, and you might end up losing both your files and your money.

The correct way to deal with threats like the EncryptServer2018 Ransomware is to run a credible anti-virus scanner that will ensure the full removal of all corrupted files. The EncryptServer2018 Ransomware's attack is meant to cause long-term damage to your data so that removing the source of the problem will not do anything to recover your files. Unfortunately, it is not yet possible to decipher this file locker's encryption so that victims might need to resort to using 3rd-party file recovery software whose success is far from guaranteed.

Technical Details

Additional Information

The following URL's were detected:
donwloadjeke.click
Loading...