Home Malware Programs Ransomware Ransomweb Ransomware

Ransomweb Ransomware

Posted: January 13, 2021

The Ransomweb Ransomware is a peculiar project that might not be a problem for regular computer users since this malware seems to be dedicated to infiltrating Web hosting servers. The Ransomweb Ransomware was discovered on a Web server running a WordPress website recently. The owner was bothered by the fact that most of the website's files were encrypted. All of the files had the '.xploter' extension added to their names, and the website was defaced with a custom page showing a message from the attacker. Surprisingly, Ransomweb Ransomware's creators are not looking for a ransom payment – instead, they inform the users that their data has been destroyed and can only recover it through a backup. Such destructive attacks were popular in the past, but cybercriminals have been trying to monetize their operations for the past couple of years. Clearly, Ransomweb Ransomware's creator is not here for the money and, instead, they are looking to cause as much mayhem as possible.

It is not clear how the Ransomweb Ransomware author infiltrated the compromised website. It is recommended to prevent such attacks by applying the latest updates to all Web-connected software, as well as to any Content Management Systems (CMS) and plug-ins you may use. You should also use strong login credentials for the administrator panel, FTP server, database management software, and all other administrative tools.

The good news is that the injury caused by the Ransomweb Ransomware may not be permanent. Victims of the threat were provided with an obfuscated 'unlocker,' which allowed cybersecurity experts to learn more about Ransomweb Ransomware's modus operandi. Apparently, the malware script does not encrypt files and, instead, it obfuscates them by using the 'gzdeflate' function (usually used for compression). The process can be overturned by using the opposite of 'gzdeflate' – 'gzinflate.' For a more detailed tutorial, the Ransomweb Ransomware victims should look for the free Ransomweb Unlocker or Ransomweb Decryptor online.

Loading...