SIFRELI Ransowmare Description
Security researchers spotted a new strain of ransomware being used in early November 2019. The reports of infections originate from Turkey almost entirely, which means the attack is very likely targeted and constrained within this country. The ransomware is named the Sifreli Ransomware, as per the extension it attaches to encrypted files.
The SIFRELO Ransomware encrypts its victims' files and appends either the ".SIFRELI" or the ".SIFRELI_DOSYA" extension. The extension itself means "encrypted file" in the Turkish language. The ransom note is contained in a file named "fidye-uyari.txt," which again translates into "ransom notice." The full text of the ransom note is in Turkish and contains the following:
'Dosyalarinizin sifresini cozmek icin iletisime gecebilirsiniz..
iLetisim : sifremicoz at protonmail.com
Sifrelenen Dosyalarinizin Listesi
This is likely a new version or the mere re-use of similar ransomware that was used in attacks back in 2017, when the encrypted files once again received the .sifreli extension, but the ransom note is different.
Currently, there is no information or hard evidence about any relationship of the Sifreli Ransomware to any existing larger families of malware and ransomware in particular. There is no decryption tool available for the Sifreli Ransomware at the moment.
Use SpyHunter to Detect and Remove PC Threats
If you are concerned that malware or PC threats similar to SIFRELI Ransowmare may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.
Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.