Matrix-NEWRAR Ransomware

The Matrix-NEWRAR Ransomware is a variant of the Matrix Ransomware, which behaves in a manner very similar to the Matrix-FASTBOB Ransomware. Both threats utilize an identical algorithm to generate and store the encryption key used to lock the files and, unfortunately, this means that the victims of the Matrix-NEWRAR Ransomware will not have access to a free decryption utility that could help them get their files back to normal.

The cybercriminals behind the Matrix-NEWRAR Ransomware have already managed to infect at least one user in Spain, a region that is not the primary target of cybercriminals usually. This might mean that the reach of the Matrix-NEWRAR Ransomware is very broad, and the attackers are likely to target multiple regions and countries. The likely propagation methods used to distribute the threatening program are spam e-mails and direct attacks on vulnerable remote desktop software. We advise our readers to take the necessary measures to ensure that their remote desktop software is secured and up-to-date, as well as that they are using a credible anti-malware application.

Failing to stop the Matrix-NEWRAR Ransomware might result in the irreversible encryption of a large portion of the files saved on the compromised computer. The likely file formats that the Matrix-NEWRAR Ransomware will target are documents, spreadsheets, images, videos, archives and other commonly used file types. Whenever a file is encrypted, the file-locker will add the ‘.NEWRAR’ extension to its name. The ransom message is dropped when the file-encryption stage of complete, and the victims will usually find the instructions of the attackers in the file ‘#NEWRAR_README.rtf.’ The ransom message reveals that the user’s data can only be decrypted with the assistance of a file-decryption tool owned by the attackers. However, they do not offer it for free and, instead, they demand a hefty ransom payment in exchange for their decryptor. The last part of the message is the e-mail address, which can be used to get in touch with the authors - newrar@cock.lu.

Unfortunately, the removal of the Matrix-NEWRAR Ransomware might be a difficult task because even if the file-encryption Trojan’s files are eliminated, you would still not be able to access the encrypted data. The only surefire way to fully recover from Matrix-NEWRAR Ransomware’s attack is to use a trustworthy anti-malware application to get rid of the corrupted files, and then recover your files from a recent backup. If a file backup is not available, then we suggest that you use 3rd-party file recovery software, which might not always deliver the best results.