Domn Ransomware

The Domn Ransomware is a variant of the STOP Ransomware, a file-locker Trojan family for hire. The Domn Ransomware can keep files on your computer from opening by encrypting them, remove any default backups, and conduct additional attacks related to extortion and collecting data. Users should have their anti-malware products available for deleting the Domn Ransomware, as well as a backup device for free file recovery.

Ransomware-as-a-Service Making the Global Rounds

A Trojan is appearing throughout the world and collecting victims in nations as different from each other as Spain, Thailand and Turkey. While its far-roving nature is exceptional, the Trojan, itself, isn't new – it's another release from the STOP Ransomware family. With its victims suffering from the absence of totally free recovery solutions currently, their failure to prevent the Domn Ransomware infections is costing them most of the media on their computers.

The Domn Ransomware's file-locking method is one of the unique elements in its Ransomware-as-a-Service family, which is for hire to any criminals interested. It can fall back to a default encryption-securing method or use a key-customized one with information that it downloads after contacting its server. The Trojan only uses the latter in cases of server disruption, and malware experts recommend disabling connectivity for any devices that could be compromised ASAP.

Whether or not it uses the former or latter encryption routine, the Domn Ransomware blocks media files, including documents, pictures, archives, and other content, while also changing their extensions to 'domn.' Victims can read the Notepad text files it generates for 'free sample' purposes, but paying the ransom demanded therein is a high-risk recovery solution. A free decryptor for the Domn Ransomware's family is limited to unlocking the offline-mode version of its attacks.

Denying Service to World-Ranging Trojans

Ransomware-as-a-Service has malleable means of distributing the individual Trojans that each criminal client generates inherently. Nonetheless, for the STOP Ransomware members like the Dutan Ransomware, the Gero Ransomware, the Grovat Ransomware, and the Todarius Ransomware, some shared factors continue appearing. Downloading illicit software or media through sources like torrents and third-party websites is likely of exposing your PC to threats of this family. Criminals also may take advantage of poor server security for hacking a target and running the Domn Ransomware manually.

Besides its file-blocking features, the Domn Ransomware may download other threats, spyware particularly. Loss of information can include credentials, such as passwords. Victims should be proactive about preventing Trojans with encryption-based features from spreading throughout any local networks and removable devices that may carry similarly-vulnerable media. In most cases, the loss of files is permanent.

Most anti-malware programs do, however, possess excellent statistical rates for detecting this family and should, if available, remove the Domn Ransomware or stop an installation attack immediately. The STOP Ransomware is one of the largest families running in 2019, but there's no such thing as 'too much' money for a hacker. Threat actors will continue creating new builds just like the Domn Ransomware until their victims stop paying up.