Frogo Ransomware

The Frogo Ransomware is a relatively new member of the broader family of the Amnesia Ransomware clones. It behaves a lot like other Amnesia variants, encrypting the victim's files, making them inaccessible and then asking for a ransom.

The files scrambled by the Frogo Ransomware receive the '.frogo' extension. However, the Frogo Ransomware goes the extra mile and also changed the original names of all encrypted files. In this way, a file that was called 'jalopy.jpg' previously, may become "jlJRPkLNTiQR5.jpg" or something with a similar randomized name consisting of 14 characters.

Once the encryption is complete, the Frogo ransomware drops its ransom note in a file named 'HOW TO RECOVER ENCRYPTED FILES.TXT.' Here is the content of the ransom note:

'===========FROGO_RANSOMWARE===========

YOUR FILES ENCRYPTED!

Your personal id

[very long alphanumeric string]

Your documents, photos, databases, save games and other important data were encrypted.

Data recovery requires a decryptor.

To receive the decryptor, you should send personal ID an email to the email address strange_wanderer at protonmail dot com

In the letter, enter your personal ID (See at the beginning of this document).

If within 48 hours there will be no payment your files start to be deleted without a return of the not recovery !!

2-6 files will be deleted!!!

If within 90 hours there will be no payment all your data will be irretrievably removed !!

* With your e-mail  strange_wanderer at protonmail dot com

Personal id

If you do not have bitcoins

* Create a wallet Bitcoin: hxxps://blockchain.info/ru/wallet/new

* Get Crypto Currency Bitcoin:

hxxps://localbitcoins.com/ru/buy_bitcoins (Visa/MasterCard)

hxxps://en.bitcoin.it/wiki/Bitcoin (What is bitcoin)

When the money transfer is confirmed, you will receive a file decryption for your computer.

After starting the decryption program all your files will be restored.

Attention!

* Do not try to uninstall the program or run antivirus software

* Attempts to self-decrypt the files will lead to the loss of your data

* Decoders of other users are incompatible with your data, since each user

Unique encryption key

==========='

There is no known decryption tool for this version of the Frogo Ransomware that can restore the scrambled files. Paying the criminals behind the Frogo Ransomware is, of course, not a great idea as well, as there is no guarantee that you will ever receive a decryption tool, assuming one exists in the first place.