Kodg Ransomware

Ransomware has been the big thing in the cybercrime field for the past few years, and, unfortunately, this will not change until users take the necessary precautions to turn ransomware in a non-profitable venture. This means that users should rely on a reputable anti-malware service to keep their computers clean of malware, and they should also keep backup copies of their important files so that they will be able to recover from a potential ransomware attack. Sadly, many users have not adopted either one of these measures, and they are the ones that are prone to fall victims of the Kodg Ransomware or other modern file-lockers.

The Kodg Ransomware is one of the latest file-encryption Trojans to be spread in the wild, and it is based on the infamous STOP Ransomware project that has shown significant growth in 2019. While most variants of the STOP Ransomware are the same practically, the Kodg Ransomware introduces one big difference – the attackers now use the email restorealldata@firemail.cc for contact. This email has not been used by other STOP Ransomware variants, so it should be noted as one of the new things about the Kodg Ransomware.

Apart from this change, the Kodg Ransomware carries out an attack that is typical for file-lockers. It starts by encrypting the contents of various file types, and then renames them by adding a unique extension – in this case, it is '.kodg.' The ransom note is once again found in the '_readme.txt' file that is created after the file-encryption attack is complete, and it instructs the reader to purchase a decryptor by sending $490 worth of Bitcoin to the attackers. It also warns them that the price of $490 is valid for a limited period, and it will be doubled to $980 eventually. In addition to restorealldata@firemail.cc, the victim is told to try contacting them via the email gorentos@bitmessage.ch too.

Needless to say, paying cybercriminals is not a viable solution, especially because of the high risk of being tricked. It is recommended to use an anti-malware service to exterminate the Kodg Ransomware, and then look for data recovery options and tools that are recommended to victims of ransomware attacks.