. Betta latest suffix ransomware perfect decryption

Source: Internet
Author: User
The latest suffix. Betta ransomware is successfully decrypted.

Case Analysis:

A company in Beijing, the network management eldest brother forgot to shut down the server yesterday. Today, the staff found that the server file could not be opened, and all files were encrypted. the suffix of Betta. This is the latest suffix that has never been seen before. Contact us through the network for Fudan decryption. The customer service staff of Fudan team immediately confirmed to engineers that it was a new variant of ransomware, similar to the combo/gamma ransomware extension, the company administrator immediately communicated with engineers and decided to remotely solve the problem. After one afternoon, the customer was able to solve the problem...

Communication channels:
Once the ransomware file enters the local environment, it runs automatically and deletes the ransomware sample to avoid virus detection and analysis. Next, ransomware uses the local Internet access permission to connect to the *** C & C server, then uploads the local information and downloads the encrypted private key and public key, use the private key and public key to encrypt the file. Except for the virus developer himself, it is almost impossible for others to decrypt the data. After the encryption is completed, the wallpaper will be modified to generate a ransom prompt file in a prominent location such as the desktop to instruct the user to pay the ransom. The variant type is very fast, and it is immune to common anti-virus software. *** Samples are mainly EXE, JS, WSF, and VBE types, which is a great challenge for General Security products that rely on feature detection.

What should I do if the virus is ransomware?

Network security experts recommend that you disconnect the network before starting the instance. In this way, you can avoid being infected by ransomware. After starting the system, you should try to install security patches or install defense tools launched by various network security companies for the connection. We recommend that you back up important files on your computer to the mobile hard disk and U disk as soon as possible. After the backup, you can store the disk offline. At the same time, you should be vigilant against unknown links, files, and emails to strengthen prevention.

. Betta latest suffix ransomware perfect decryption

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.