Home Malware Programs Ransomware Support Ransomware

Support Ransomware

Posted: June 30, 2020

The Support Ransomware is a file-locking Trojan that's from the MedusaLocker Ransomware family. The Support Ransomware can hold your media files as hostages by encrypting them and represents a significant threat to unprotected networks. Users should abide by appropriate security standards, have backups for recovering, and let anti-malware utilities remove the Support Ransomware as soon as they detect it.

Some Unpleasant Support from Your Favorite Gorgon

The Greek myth of Medusa is, currently, more famous than the MedusaLocker Ransomware significantly – a far more recently-created and tangible threat. This small family of file-locking Trojans, including variants like the Best Recovery Ransomware, the Decrypme Ransomware, and the Support Ransomware, first came into notice after 'borrowing' Globe Imposter Ransomware's note. Although the new edition, the Support Ransomware, ditches this template, its encryption and attacks work just as well as ever.

Even though its family is one of the smaller ones in the threat landscape, the Support Ransomware operates very similarly to the more substantial equivalents, like the Scarab Ransomware or the Dharma Ransomware. It has an unremarkably-small filesize for quick downloading and targets Windows environments. Before starting the encryption that blocks files, the Support Ransomware also terminates the processes of some security programs, restarts network-related services and deletes the Restore Points.

Together, these elements place the Support Ransomware in an optimal position for proceeding with the 'capturing' of files with its encryption routine, which makes them non-openable. It identifies each document, database, picture, and other media that it attacks by appending the extension for its campaign ('support'), before creating a Web page as a ransom note. This note isn't a total copy of previous ones but does include many of the traditional features malware experts expect, such as client IDs and links to anonymous TOR sites.

Breaking Out a Data Support Team that Trojans can't Beat

The Support Ransomware is, like the rest of its family, a sufficient danger to any Windows users, whether at home or at work, who don't protect their files. Digital media preservation should emphasize regular updates and non-local storage and, ideally, additional safety layers, such as password requirements. Although the Support Ransomware family includes features for targeting networks, it also is a possible threat to solitary PCs and home users.

Windows users should watch the following areas for preventing possible the Support Ransomware attacks:

  • E-mail messages can be infection vectors through both links and, especially, attached files. Users should avoid reading documents with outdated software or enabling possibly-threatening macros.
  • Illicitly-shared files, through torrents and different websites, can carry file-locking trojans and other threats.
  • Trojan tactics also may use topical news, such as fake COVID-19 tracking applications, for gaining installation.
  • Servers also are at risk whenever they don't apply security updates or use insufficiently-secure passwords.

There isn't a free decryption service for the Support Ransomware or other members of MedusaLocker Ransomware's group. As such, victims' hopes of recovery lie, primarily, on their backup standards. Anti-malware tools also can defend systems by deleting the Support Ransomware as a threat on sight.

The Medusa of myth's key traits are ugliness and turning life into stone. The Support Ransomware is a digital translation of the same thing, but, thankfully, anyone with a computer has a 'magic shield' available, if they choose to use it.

Related Posts

Loading...