Home Malware Programs Ransomware '.shit File Extension' Ransomware

'.shit File Extension' Ransomware

Posted: October 25, 2016

Threat Metric

Threat Level: 8/10
Infected PCs: 19
First Seen: October 25, 2016
Last Seen: April 14, 2022
OS(es) Affected: Windows

The '.shit File Extension' Ransomware is a minor variant of the '.locky File Extension' Ransomware that includes a separate extension and extortion instructions alongside the standard data-encoding feature. Content encrypted by the '.shit File Extension' Ransomware can't open until after being decrypted again, although backups can render such technical difficulties moot. Preexisting anti-malware solutions can block all of this threat's known infection vectors or delete the '.shit File Extension' Ransomware before it encrypts any part of your hard drive.

Wasting Money on a Trojan Named for Waste

Middle and late October has seen new releases of both independent threats and spin-offs of old ones. Despite basing their code on already-acquired samples, the latter threats aren't any more vulnerable to having the impact of its payload negated by existing security solutions necessarily. The continuing potency of the '.locky File Extension' Ransomware family's 'brand,' as shown with the '.shit File Extension' Ransomware, epitomizes how a threat author can put little work into their products to maximize the damage they cause.

Malware researchers found almost all details of the '.shit File Extension' Ransomware's payload and installation exploits corresponding to past ones for the above family, which also includes members like the '.odin File Extension' Ransomware and the Cryakl Ransomware. The '.shit File Extension' Ransomware installs itself through Trojan droppers disguised within e-mail attachments, using which go through a multi-step process including forcing Windows to load a corrupted DLL. Then, the '.shit File Extension' Ransomware encrypts almost four hundred separate types of data on your PC.

The '.shit File Extension' Ransomware also renames these files, appends the '.shit' extension to each one, and creates HTML and BMP notes for issuing its ransom demands.

Getting the Stench of the '.shit File Extension' Ransomware out of Your Files

Like most members of the '.locky File Extension' Ransomware's family, the '.shit File Extension' Ransomware doesn't present serious cryptography vulnerabilities that would enable the development of free decryption applications. Although PC owners can restore their content from backups not compromised by this threat's payload, those without such options may need to choose between paying con artists hundreds of dollars in the Bitcoin currency or dealing with the loss of hundreds of types of data. Content at risk for being encrypted includes documents, video, compressed archives, Java scripts and numerous, other formats, although the Windows OS should not be damaged directly.

Because of their ease of development for new threat actors without meaningful coding experience, variants of the '.locky File Extension' Ransomware like the '.shit File Extension' Ransomware appear on a regular basis. First and foremost, malware experts recommend paying attention to Web-browsing security, particularly regarding unidentified e-mail attachments that are most likely to carry Trojan droppers for the '.shit File Extension' Ransomware. Most dedicated anti-malware tools should be able to identify these installers and remove them or remove the '.shit File Extension' Ransomware during its execution.

Unfortunately, the current pattern of the threat industry is symptomatic of the '.shit File Extension' Ransomware being a lingering threat that, much like any foul aroma, is likely to stay around in one form or another for the foreseeable future.

Loading...