Adage Ransomware

The Adage Ransomware is a file-locking Trojan from the Phobos Ransomware's family. Like other members of this family, it can encrypt files as a way of blocking them from opening, make changes to their filenames, and leave ransoming messages in multiple formats. Users should back their work up onto another storage device or computer and keep anti-malware programs ready for removing the Adage Ransomware as soon as it becomes identifiable.

Something New to Fear from the Phobos Ransomware

Although the Phobos Ransomware family isn't the largest of its kind, as a risk to users without backups, it's remaining present in the threat landscape for the summer of 2019. New variants of it include the spin-off of the 'audrey.b@aol.com' Ransomware and the more typical 'tedmundboardus@aol.com' Ransomware and the 'fobosamerika@protonmail.ch' Ransomware, all from this year. Accordingly, a newer printing of the Trojan isn't unexpected, although this version, the Adage Ransomware, is finding itself more effective in avoiding some AV vendors' services.

The Adage Ransomware's attacks are using infection vectors requiring more analysis by malware experts. They can, however, confirm that it's in the wild, with updated code obfuscation techniques that hide it from Eset-brand anti-virus protection. If it's using the same strategies as the old versions of Phobos Ransomware, criminals may be breaking into servers and encrypting them by scanning for RDP-enabled targets throughout the Web.

The Adage Ransomware adds itself to Windows Startup for its persistence and hides copies of its executable inside of the AppData folder. Then, it encrypts your media files, including desktop shortcuts, but also pictures, images, etc., and inserts IDs, e-mail addresses, and 'adage' extensions into the names. Malware experts do note that identifying the Adage Ransomware after this attack is bulletproof relatively since it drops highly-characteristic TXT and HTA ransom notes throughout the computer.

Heeding Old Adages before Their Trojans Pay Heed Your Files

Threat actors associated with the Adage Ransomware's family have histories of taking their ransoms and not giving the unlocking assistance they promise back to the victims. Malware experts advise not paying this fee, unless the user attempts every other solution, first, including advanced data utilities like the Shadow Explorer. Backing up one's work to a secure location is the standard recommendation for keeping file-locking Trojans from causing excessive harm to one's media.

Website admins should be highly cautious about leaving RDP open or using weak passwords, which are traits that invite attacks by Phobos Ransomware's family, and similar threats. Patching server software is, similarly, ideal, since it removes many, if not all, vulnerabilities that a remote attacker could abuse for his profit. Update your anti-malware solutions routinely for helping with their accuracy and the deletion of the Adage Ransomware with a minimum of problems.

The Adage Ransomware puts its victims into an unhappy 'rock and hard place' position, where they can gamble on the ransom, or accept the loss of their work. It shouldn't surprise anyone that the best response is avoiding that situation with standard security watchwords before it ever happens.