Home Malware Programs Ransomware Supermagnet@india.com Ransomware

Supermagnet@india.com Ransomware

Posted: December 7, 2016

Threat Metric

Threat Level: 10/10
Infected PCs: 76
First Seen: December 7, 2016
OS(es) Affected: Windows


The 'Supermagnet@india.com' Ransomware is a variant of the Dharma Ransomware. Both Trojans block your files, such as documents and pictures, with an encryption-based attack that modifies their internal data through an algorithm. Since this threat is non-decryptable by public means, malware researchers advise restoring any lost content from a backup after deleting the 'Supermagnet@india.com' Ransomware with any anti-malware product you consider appropriate.

Trojans Magnetizing Your Money to Their Wallets

Trojans reusing attacks from older programs are not rendered less threatening for the age of their code necessarily. For many threats, a sufficiently different footprint can help them avoid common security protocols while still enacting the same, old, reliable payloads. For the 'Supermagnet@india.com' Ransomware, a program hailing from the Dharma Ransomware subdivision of file-encrypting Trojans, that payload consists of holding your content for ransom.

Many attacks from this family use brute-force attempts at breaking password-protected systems. Malware experts also find some samples of the 'Supermagnet@india.com' Ransomware using labels implying that it could be distributing itself as a fake Reddit-YouTube fusion extension for the victim's Web browser. The original install exploit does nothing to alter the 'Supermagnet@india.com' Ransomware's symptoms and attacks, which readers may note as:

  • The 'Supermagnet@india.com' Ransomware encodes your files to block them by using a (currently unbreakable) enciphering algorithm. This process is separate from any renaming functions as explained below and will prevent you from opening the files until you decrypt them.
  • The 'Supermagnet@india.com' Ransomware also includes the extension-inserting feature of most similar threats. Any encoded content has its name modified with the '.wallet' extension added after the previous one. Renaming them or removing the extension doesn't mitigate the encryption portion of the attack.
  • Trojans of the 'Supermagnet@india.com' Ransomware's family don't always deliver ransom messages to communicate how to pay for the threat actor's decryption assistance. However, e-mail addresses sometimes are provided in the names of any encoded content.

Taking the Magnetic Attraction out of a Trojan's Attacks

Although victims desperate sufficiently may contact the 'Supermagnet@india.com' Ransomware's e-mail addresses for help on paying to get their content back, this ransom-based recovery method is unreliable. Unfortunately, malware researchers have found this family not to be vulnerable to third-party decryption efforts without access to the key its threat actor's hold. The continuing presence of unbreakable encryption Trojans like the 'Supermagnet@india.com' Ransomware increases the value of having frequently-updated backups in safe locations substantially.

Whether you can recover your content or not should have no effect on removing the 'Supermagnet@india.com' Ransomware safely. Like any threatening software, this Trojan can be installed in bundles with other threats or create security issues, such as modified network settings, for instigating other attacks. Most anti-malware products should be able to resolve the above while deleting the 'Supermagnet@india.com' Ransomware. A majority of anti-malware product brands to date have good detection rates for the 'Supermagnet@india.com' Ransomware, although updated databases may be necessary for optimizing their threat-detecting accuracy.

Not every Trojan's story has a happy ending for its victims. However, protecting your files and your computer from the 'Supermagnet@india.com' Ransomware with basic security standards can reduce the chances of copycat campaigns in the future.

Loading...