Ke3q Ransomware

The B2DR Ransomware is one of the less popular file-locker families when compared to the likes of the Scarab Ransomware and the STOP Ransomware. Despite this, it is not to be underestimated since it still has the ability to cause a lot of damage if it is not stopped by anti-virus software. One of the new members of this ransomware family is the Ke3q Ransomware, a file-locker that uses the ‘.ke3qx’ extension to mark the names of locked files, and prompt victims to pay a significant amount of money in exchange for a decryptor.

The attackers tell victims to message one of these four emails for further details and payment instructions - loggitore1984@protonmail.com, loggitore1984@cock.li, loggitore1984@mailchuck.com and loggitore1984@tuta.io. The full ransom message is stored in ‘Readme.tx,’ a file that is usually dropped on the desktop after the completion of the attack.

The removal of the Ke3q Ransomware is only a partial solution since the victim’s files will still be left in an encrypted state. Unfortunately, it is not possible to undo this for free, and the only reliable recovery option is to restore the files from a backup. Victims of the Ke3q Ransomware who do not own a backup copy of their files might need to turn to the services of alternative data recovery software that may not always deliver quality results.