Home Malware Programs Ransomware Mailrepa.lotos@aol.com Ransomware

Mailrepa.lotos@aol.com Ransomware

Posted: September 1, 2016

Threat Metric

Threat Level: 10/10
Infected PCs: 79
First Seen: September 1, 2016
OS(es) Affected: Windows


The 'Mailrepa.lotos@aol.com' Ransomware is a Trojan that blocks your local work and other files by encrypting them. Normally, these attacks are preliminaries for initiating ransom negotiations that force payments in return for a decryption solution, although the 'Mailrepa.lotos@aol.com' Ransomware may not create any extortion instructions. Since malware experts note the likely difficulty of decrypting your enciphered content, you should use backups to undo the damage if your anti-malware programs don't stop the 'Mailrepa.lotos@aol.com' Ransomware beforehand.

A Reaper Coming in Silence for Your Files

Using Trojans for extortion can include surprisingly elaborate, well thought-out tactics, but just as often provide little or no education to their victims. Recent infection scenarios with the 'Mailrepa.lotos@aol.com' Ransomware show the most extreme form of the latter, with the Trojan's victims being unable to contact the campaign's admin to pay the ransom. The already slender chances of decrypting and recovering the data that the 'Mailrepa.lotos@aol.com' Ransomware damages, therefore, goes down even further than usual.

The 'Mailrepa.lotos@aol.com' Ransomware infections are known for compromising Network Attached Storage (or NAS) drives, although malware experts see no cases of them duplicating themselves, in the fashion of a worm. Instead, the 'Mailrepa.lotos@aol.com' Ransomware most likely includes network-mapped drives and other, temporary drives in its file scans, which it uses for targeting data to encrypt. Besides encrypting each piece of data and blocking it in the process, the 'Mailrepa.lotos@aol.com' Ransomware also renames them, with a format in use by CrySiS-based threats: an appended ID string, an e-mail address in braces, and the traditional '.CrySiS' extension.

The above attacks are almost definitive aspects of the 'Mailrepa.lotos@aol.com' Ransomware's estimated family, but malware experts also saw strange omissions in the 'Mailrepa.lotos@aol.com' Ransomware's payload. The 'Mailrepa.lotos@aol.com' Ransomware does not always generate TXT or HTML ransom instructions or modify the victim's desktop wallpaper. As of the latest reports, the e-mail address the 'Mailrepa.lotos@aol.com' Ransomware uses is also down. The victims have no means of paying the 'Mailrepa.lotos@aol.com' Ransomware's ransom to restore their contents, and the Trojan's threat actors have no way of profiting from current versions of the Trojan.

A Crisis in Data Loss that's not as Bad as It could Have Been

The details of the 'Mailrepa.lotos@aol.com' Ransomware's campaign create a pessimistic view of its victims' chances of restoring any content they haven't had the foresight to back up to a safe source. On the other hand, the Trojan's communication issues may be fortuitous. Evidence in the ransom formats of similar campaigns, most notably, the Centurion_Legion Ransomware, implies that the Trojan's threat actors belong to a group that takes their ransoms without helping the user with the decryption effort habitually. A lack of e-mail responses and a permanent loss of your data may be preferable than a false hope of data restoration that comes with a high but fruitless price tag.

Whatever its other problems might be, the 'Mailrepa.lotos@aol.com' Ransomware's campaign does show high rates of evading some Trojan detection utilities recommended by various elements of the PC security sector. Careful e-mail activity, regular password rotation, and overall safe Web-surfing behavior can deprive the 'Mailrepa.lotos@aol.com' Ransomware of vulnerabilities for installing itself, anti-malware products can remove the 'Mailrepa.lotos@aol.com' Ransomware before its payload finishes itself, and backups can stop the 'Mailrepa.lotos@aol.com' Ransomware from destroying your data.

Ignorance isn't always bliss, but for both the PC owners being attacked by the 'Mailrepa.lotos@aol.com' Ransomware and the con artists controlling its campaign, a lack of information can come with unanticipated consequences.

Loading...