Home Malware Programs Ransomware Zobm Ransomware

Zobm Ransomware

Posted: November 26, 2019

The Zobm Ransomware is a file-locking Trojan from the Ransomware-as-a-Service known as STOP Ransomware. Besides blocking your files by encrypting them, it can cause side effects, including wiping default backups and modifying your ability to load various websites potentially. Let your anti-malware programs uninstall the Zobm Ransomware or quarantine it before recovering through a safe backup, if possible.

The STOP Ransomware Remains an Unstopping Predator at Large

Ransomware-as-a-Service is an illicit business model that profits off of selling temporary usage of Trojan software to threat actors with less interest in programming but the confidence for distributing pre-made threats. Typically, the result is a ballooning family of very-similar Trojans with minor variants in their themes and names, such as the STOP Ransomware's Kodg Ransomware, the Hese Ransomware, the Lokf Ransomware, or the Rote Ransomware – all 2019 releases. Despite this profusion of campaigns, another of this group is thrusting its way forward amidst competition: the Zobm Ransomware.

Although it's likely of bearing a newer build number, current evidence shows that the Zobm Ransomware is a standard entry into its family. First and foremost, it may lock media – most prominently, documents, music, and pictures, for example – by encrypting each file with a secure, two-algorithm routine. The second half of the sequence uses a key that, for optimal security, requires an Internet connection. In rare cases, users might prevent the C&C contact accidentally or deliberately, which raises the chances of unlocking or recovering content with freeware services that are specific to the STOP Ransomware family.

Other issues that the Zobm Ransomware causes are less obvious but as invasive equally. It may download and install spyware for collecting login credentials, block websites by changing the mappings of IP addresses to various hostnames, and delete the Windows Restore Points automatically.

Mending the Damage of a For-Hire Trojan

An appropriately-secured backup is nearly mandatory for guaranteeing a recovery from any file-locking Trojan's attacks. While some versions of the STOP Ransomware are compatible with free decryption applications, others aren't, particularly, recent releases like the Zobm Ransomware or the Rote Ransomware. Windows platforms are at risk from this Ransomware-as-a-Service group's campaign, particularly, but others, including Unix-based ones and macOS, also are targets.

Administrators always should be cautious about controlling software versions for amending any security flaws, and all users should keep their credentials for logging into accounts secure against randomly-guessing through brute-force techniques. For the Zobm Ransomware's family, especially, malware experts recommend avoiding illicit download resources like torrents, which have connections to multiple STOP Ransomware variants.

Fortunately, most anti-malware vendors have the advantage over commonplace Ransomware-as-a-Services. Appropriate security products should eliminate the Zobm Ransomware while scanning for threats without significant obstacles.

The Zobm Ransomware is a pedestrian example of a Trojan with just enough changes that it's distinguishable from near relatives. What's more important than its name or symptoms is the fact that it represents a new angle of aggression against digital media, which all PC users should take as a proper forewarning.

Loading...