Pidom Ransomware

The Pidom Ransomware is not an entirely new file-encryption Trojan since a larger portion of its features and code are based on the popular STOP Ransomware. Unfortunately, this is bad news since the STOP Ransomware is not decryptable via free utilities, and its victims may often need to resort to alternative data recovery techniques whose chances of success are far from excellent.

When the Pidom Ransomware sneaks onto a computer, it may get to work in a background process and render many of the computer’s files useless immediately. Naturally, the operators of the file-locker want to harm as many important files as possible, hence why their file-locker focuses on Microsoft Office documents, Adobe projects, text files, videos, images, archives, backups, databases, etc. Whenever the Pidom Ransomware locks a file, it will alter its name and include the ‘.pidom’ extension (e.g. ‘project.psd’ would be renamed to ‘project.psd.pidom’). Please note that removing the newly added extension has nothing to do with the file’s encrypted contents, and this will not undo the damage done by the Pidom Ransomware’s attack.

Of course, the cybercriminals behind this campaign are expecting to make money, and this is why all of their victims are supplied with a ransom note called ‘_readme.txt’ that explains the attack, provides contact details and tells victims what they need to do if they wish to have a chance to restore their files. The solution proposes by the Pidom Ransomware’s authors is not acceptable – they ask to be paid a few hundred dollars via Bitcoin and then be contacted at stoneland@firemail.cc. However, they do not offer any proof that they own a working decryptor, nor do they supply any guarantee that you will not end up being tricked out of your money.

Cooperating with anonymous cybercriminals is never a good idea so that we suggest that you look into legitimate data recovery options. Of course, the first thing to do is to eliminate the Pidom Ransomware by using a trusty anti-malware application. After this, you should see if any 3rd-party data recovery utilities can help undo some of the damage. It also is recommended to preserve the locked files since there is always a glimmer of hope that the attackers may have a change of heart and release a free decryptor.