Matrix-EMAN50 Ransomware

Variants of the infamous Matrix Ransomware continue to appear on a regular basis, and today’s version has been dubbed the Matrix-EMAN50 Ransomware. Its name suggests that it is likely to be a follow-up variant of the Matrix-EMAN Ransomware that was spotted by security researchers in the first week of October. The Matrix-EMAN50 Ransomware does not seem to include any new things regarding functionality, but it does use another file extension to mark the locked files. In addition to the new extension, the Matrix-EMAN50 Ransomware also will provide its victims with different contact details that can be used to get in touch with the cybercrooks behind the attack.

Another Impossible to Decrypt Variant of the Matrix Ransomware

The bad news is that the Matrix-EMAN50 Ransomware is not decryptable, and this means that its victims will be left with a hard drive full of encrypted files unless they have the habit to make file backup regularly. If you are one of the Matrix-EMAN50 Ransomware’s victims, then you will find out that a large number of your files have had the ‘.EMAN50’ or the ‘.GMAN’ extension added to their names. The ransom note is stored in either ‘#README_EMAN50#.rtf’ or ‘#README_GMAN#.rtf.’ The attackers use the following e-mail addresses for contact – gman222@qq.com, tru888@qq.com, tru8@protonmail.com and tru8@tutanota.com.

We would not advise you to contact the attackers because there is minimal chance that they will help you for free and, in addition to this, there is no guarantee that they will give you a decryption tool even if you meet all their demands. Naturally, the cybercrooks behind the Matrix-EMAN50 Ransomware are in it for the money, and this is why the ransom message says that the victims will need to complete a ransom payment if they want their files to be recovered.

If you are a victim of the Matrix-EMAN50 Ransomware, you should install and run a trustworthy anti-malware application immediately, which will help you dispose of the file-locker’s corrupted files. After this step is complete, you should try using 3rd-party file restoration software – do not forget that these applications are not guaranteed to work, and their success is likely to be partial at best.