Hades666 Ransomware

The Maoloa Ransomware family emerged in 2019, and its code has already been used to create over a dozen of file-locker variants that will encrypt the files of non-suspecting victims. One of the recent Maoloa variants to be identified by malware researchers is the Hades666 Ransomware, a file-encryption Trojan that may be spread via fake downloads, bogus email attachments, or pirated software and games.

A Modified Maoloa Ransomware Variant is Still Uncrackable

If the users end up with the Hades666 Ransomware on their computers, they may lose access to the majority of their documents, archives, databases, images, videos, music and other files. The files that the Hades666 Ransomware locks also will have their names modified by adding the '.hades666' extension after the original filename – for example, 'image.png' would be renamed to 'image.png.hades666.'

The cybercriminals behind this project have not crafted this malware just to mess with random Internet users – they plan to extort their victims for money by offering a paid decryption service. The full details about this offer are found in the file 'HOW TO BACK YOUR FILES.txt' that the Hades666 Ransomware will leave on any infected system.

’YOUR FILES ARE ENCRYPTED !!!
TO DECRYPT, FOLLOW THE INSTRUCTIONS:
To recover data you need decrypt tool.
To get the decrypt tool you should:1.In the letter include your personal ID! Send me this ID in your first email to me!
2.We can give you free test for decrypt few files (NOT VALUE) and assign the price for decryption all files!
3.After we send you instruction how to pay for decrypt tool and after payment you will receive a decryption tool!
4.We can decrypt few files in quality the evidence that we have the decoder.
DO NOT TRY TO DO SOMETHING WITH YOUR FILES BY YOURSELF YOU WILL BRAKE YOUR DATA !!! ONLY WE ARE CAN HELP YOU! CONTACT US:
Sin_Eater.666@aol.com
ATTENTION !!! THIS IS YOUR PERSONAL ID WICH YOU HAVE TO SEND IN FIRST LETTER:
{{ID}}’

Paying the Ransom Fee is Out of the Question

According to the ransom message, victims need to message sin_eater.666@aol.com for payment information and details. The attackers also promise to decrypt 2-3 files free of charge to prove that their decryptor works. While the latter offer should be accepted, we assure you that paying the ransom is not a good idea – the money may be used to sponsor more threatening malware, and there is a chance that you may get tricked in the end.

Victims of the Hades666 Ransomware are advised to remove the infected files with the help of a suitable anti-virus scanner. When this step is complete, they can try out alternative data recovery methods to see if they can help them get their files back safely.