• Cyber Security
    • Ransomware Prevention
    • Ransomware Removal
    • Ransomware File Recovery
    • Ransomware Types
  • Ransomware Services
    • Ransomware Removal
    • Ransomware File Recovery
  • News
  • Tutorials
  • Ransomware TV

BitKangoroo: A Ransomware Uses the Scare Tactic of File Deletion

May 14, 2018Simeon Georgiev

At the core of it, ransomware attack is intended to play out like any ransom activity where perpetrators scare victims into paying the extortion money. In cryptovirological attacks, the perpetrators make your data ‘hostage’ and force you to pay them in order to ‘free’ it.

In the beginning, when ransomware was still new on the block, the affected users used to pay the perpetrators to recover their encrypted files. With more robust and effective ransomware removal measures in place, many victims now refuse to budge to the demands of ransomware operators.

To get back the element of a scare in ransomware activities, some cybercriminals has introduced a new feature to their cryptovirological strain that doesn’t only encrypt the files on the affected device but also deletes the locked down files one by one. This scare tactic was effectively used by the developers of Jigsaw ransomware. Now, a ransomware goes with the name BitKangoroo is employing the same technique to ensure the affected victims pay them to get back their files instead of employing ransomware removal services.

BitKangoroo is developed to delete a single encrypted file after every 60 minutes. This feature is used to provoke the sense of time urgency in victims in the context of ransom payment. Ruthlessness of BitKangoroo doesn’t end here because if you try to recover your files through trial-and-error method by putting different decryption keys, then it will delete all the encrypted files at the first incorrect iteration.

Victims not aware of ransomware removal measures and don’t have any backup of their locked down files, they might yield to the ransom demands of the attackers. But it should be kept in mind that the payment of ransom doesn’t guarantee the restoration of encrypted files. There have been cases where people couldn’t get their files back even after the payment of ransom due to poorly-written cryptographic codes destroying the encrypted files permanently.

But there is no need to worry if you are constantly updating your data backups. In addition, professional ransomware removal services can help you in retrieving the data encrypted by BitKangoroo.

For assistance with file recovery and ransomware removal, please contact MonsterCloud – cyber security experts for a professional ransomware removal.

Simeon Georgiev
https://www.linkedin.com/in/simeon--georgiev/
I am a Cyber Security Enthusiast from Bulgaria. I like to write about malware and ransomware and global cyber attacks. You can reach me on Twitter @sgeorgiev1995 or Email: [email protected]
Previous post Surging Ransomware attacks targeting the Ukrainian Energy Ministry Next post New Variant of SynAck is Equipped With Doppelganging Circumvention Technique

Latest on Ransomware TV

https://vimeo.com/399908876?loop=0

Recent Posts

  • How to protect your organization against ransomware reinfections
  • AuKill Helps Ransomware Operators Disable EDR and Security Tools
  • AI-ransomware is a real threat, just not a realistic one yet
  • Rorschach is the new speed king in the ransomware space
  • The Role of Supply Chain Breaches in Ransomware Attacks

Stay Protected

Subscribe to our mailing list to get the latest cyber security and ransomware removal articles!

Thank you for subscribing.

Something went wrong.

Navigation

  • Cyber Security
    • Ransomware File Recovery
    • Ransomware Prevention
    • Ransomware Removal
    • Ransomware Types
  • News
  • Tutorials

Ransomware Attacks (Last 6M)

0

Connect & Protect

Facebook
Google+
LinkedIn
YouTube
Vimeo

More

  • BECOME A CONTRIBUTOR

MonsterCloud Reviews

© 2020 MonsterCloud.com. All Rights Reserved.