Robin Hood And Family Ransomware

The Robin Hood And Family Ransomware is a file-wiper Trojan that deletes your media, such as documents while claiming that paying its ransom will give you a downloadable backup. Since malware experts can't verify any remote data-uploading features associated with backups or cloud storage, users shouldn't expect that paying the ransom will give them their files. Conventional anti-malware applications should delete the Robin Hood And Family Ransomware immediately before it attacks.

The Bandit with a Finger on Your Delete Key

A new Trojan is circulation the Web that's collecting Bitcoins after damaging your files. However, this threat isn't a file-locking one, but a wiper: a Trojan that erases data on your PC, instead of encrypting it. Although most file-locker Trojans include some degree of deletion-related features, the Robin Hood And Family Ransomware is one of the few to leverage the attack as its dominant means of extorting money.

The Robin Hood And Family Ransomware may delete files in a variety of locations automatically, although malware analysts only are confirming the targeting of the user's desktop. Other areas also at high risk include the Downloads folder and the Windows profile directories, such as My Pictures. After deleting these files securely, the Robin Hood And Family Ransomware creates a Notepad message containing a warning to the victim.

The Robin Hood And Family Ransomware's English message may be output from an automated translation utility due to including various typos and unconventional grammar. However, its details convey the traditional elements of a file-based ransoming procedure: a Bitcoin wallet for paying, a custom ID for the user, and an e-mail address for communicating with the threat actor. While the Robin Hood And Family Ransomware claims that it backs up the PC's files remotely before deleting them, malware analysts can't verify such a feature being present in any build of the Trojan.

Uninviting the Worst Family Kind from Your PC

The Robin Hood And Family Ransomware asks for just over nine hundred USD through Bitcoin payments but gives no guarantees of restoring your files after the money transfer. Since the Robin Hood And Family Ransomware erases data securely, users may not be able to recover anything that they don't already have backed up to another device, such as a cloud storage service, DVD or USB. Most file-locking Trojans use encryption without deleting the files, which, often, gives the victims a small chance of retrieving their media with a public decryption app.

The Robin Hood And Family Ransomware's campaign is using infection methods not yet determinable. Methods malware analysts recommend expecting as potential vectors of infection include:

• E-mail attachments, ones that resemble documents for a package delivery company or work-related communications particularly.
• Unsafe websites can host threats like the Nebula Exploit Kit, which may use a range of software-based vulnerabilities for downloading the Robin Hood And Family Ransomware onto your PC automatically.
• File-sharing networks and related, illegal downloads.

Users also can protect themselves by using strong passwords on all of their logins for preventing targeted, brute-force attacks. Standard anti-malware security should eliminate the Robin Hood And Family Ransomware through all other arrival methods.

There is always a risk that paying con artists and expecting them to keep their word is done in vain. However, with threats like the Robin Hood And Family Ransomware, that hope is even slimmer than usual, making it all the more important to protect your files before an infection strikes.