SIFRELI Ransowmare

SIFRELI Ransowmare Description

Security researchers spotted a new strain of ransomware being used in early November 2019. The reports of infections originate from Turkey almost entirely, which means the attack is very likely targeted and constrained within this country. The ransomware is named the Sifreli Ransomware, as per the extension it attaches to encrypted files.

The SIFRELO Ransomware encrypts its victims' files and appends either the ".SIFRELI" or the ".SIFRELI_DOSYA" extension. The extension itself means "encrypted file" in the Turkish language. The ransom note is contained in a file named "fidye-uyari.txt," which again translates into "ransom notice." The full text of the ransom note is in Turkish and contains the following:

'Dosyalarinizin sifresini cozmek icin iletisime gecebilirsiniz..

iLetisim : sifremicoz at protonmail.com

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Sifrelenen Dosyalarinizin Listesi
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

[file list]'

This is likely a new version or the mere re-use of similar ransomware that was used in attacks back in 2017, when the encrypted files once again received the .sifreli extension, but the ransom note is different.

Currently, there is no information or hard evidence about any relationship of the Sifreli Ransomware to any existing larger families of malware and ransomware in particular. There is no decryption tool available for the Sifreli Ransomware at the moment.

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to SIFRELI Ransowmare may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria.

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Posted: November 1, 2019
Home Malware Programs Ransomware SIFRELI Ransowmare

Leave a Reply

Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter. If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.