Fcorp Ransomware

Ransomware is always threatening, but some file-lockers use a file-encryption routine that can be deciphered for free. This is the case of the newly spotted Fcorp Ransomware, a fully weaponized file-locker that, thankfully, was created by using the HiddenTear project. Because of this, it uses a flawed encryption routine, which might be cracked by using the free 'HiddenTear' decryptor. Despite the low quality of the Fcorp Ransomware, its ransom message claims that the victim has no option to recover their files and that they will need to pay a ransom fee if they wish to use their data again.

The Fcorp Ransomware marks damaged files with the '.fcorp' extension, and it also creates the 'READ_IT.txt' ransom note. Victims of the Fcorp Ransomware are asked to pay a ransom fee of 0.002 Bitcoin, but we assure you that you should not do this. Even if you end up paying, it would be impossible for the criminals to provide you with a decryption service – their payload does not carry the decryptor component, and they have not provided any way to get in touch with them. It is very likely that users who pay will end up being tricked.

If you believe the Fcorp Ransomware has damaged your files, we suggest that you run an anti-malware tool to terminate the threat immediately. Once Fcorp Ransomware is gone for good, you can run the free 'HiddenTear' decryptor, which should guide you through the data recovery process.