{"id":29715,"date":"2025-02-22T09:46:31","date_gmt":"2025-02-22T09:46:31","guid":{"rendered":"https:\/\/gridinsoft.com\/blogs\/?p=29715"},"modified":"2025-02-22T09:46:31","modified_gmt":"2025-02-22T09:46:31","slug":"cipherlocker-ransomware","status":"publish","type":"post","link":"https:\/\/gridinsoft.com\/blogs\/cipherlocker-ransomware\/","title":{"rendered":"CipherLocker Ransomware"},"content":{"rendered":"

CipherLocker is yet another malware variant that encrypts user data and demands a ransom<\/strong>. The only difference between this threat and its brethren is the unrealistic greed of its developers, who ask for as much as 1.5 BTC per file. Today I will shed some light on this threat and tell you what it is and how to get rid of it.<\/p>\n

CipherLocker Ransomware Overview<\/h2>\n

CipherLocker is a newly identified ransomware variant<\/a> that encrypts user data and appends the “.clocker” extension to the affected files. This follows a typical attack pattern\u2014locking victims’ files and demanding a ransom for decryption. While it may seem like a no name ransomware, it’s just as good as its more established counterparts and can also give you trouble.<\/p>\n

\"Locked
Files locked by CipherLocker<\/figcaption><\/figure>\n

This ransomware has a pretty common distribution pattern for this type of malware. It is spreading primarily through infected email attachments<\/a>, torrents, and malicious advertisements. The attackers behind CipherLocker demand payment in Bitcoin, also popular among cybercriminals. Based on current analysis, no free decryption tool is available.<\/p>\n

Ransom Note Overview<\/h2>\n

In each folder with locked files, CipherLocker delivers its ransom note. This is a text file, typically named “README.txt” or “RECOVERY_INSTRUCTIONS.txt.” The message informs victims that their files have been encrypted and that all potential backup solutions, including Windows Shadow Copies and recycle bin contents, have been removed. To regain access to their files, victims are instructed to pay 1.5 BTC (~$147 998,37 at the current price<\/a>) to a specified Bitcoin wallet.<\/p>\n