Mespinoza Ransomware Description
In late October 2019, a new variety of ransomware was spotted in the wild. There are few details concerning any relationships to larger families of existing ransomware, so researchers are calling the new strain by the handle used in the ransom demand email - Mespinoza Ransomware.
The Mespinoza Ransomware affects a wide variety of file types, comprising all common extensions, including images, audio and music files, databases, office documents and PDF files. The encrypted files receive the .locker extension, which means that a file named "cat_and_dog.jpg" originally will become "cat_and_dog.jpg.locker" once the Mespinoza ransomware has scrambled it.
The ransom note is dropped in a file named "Readme.README" and contains the following text:
Every byte on any types of your devices was encrypted.
Don't try to use backups because it were encrypted too.
To get all your data back contact us:
Q: How can I make sure you don't fooling me?
A: You can send us 2 files(max 2mb).
Q: What to do to get all data back?
A: Don't restart the computer, don't move files and write us.
Q: What to tell my boss?
A: Shit happens.'
There is no specific ransom demand, but given that the ransom note is addressed to companies and not home users, it's safe to say that the ransom for businesses will be high.
Use SpyHunter to Detect and Remove PC Threats
If you are concerned that malware or PC threats similar to Mespinoza Ransomware may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.
Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.