Bydes Ransomware
Bydes ransomware is the name of a newly discovered strain of file-encrypting malware. The new ransomware does not seem to belong to any of the major ransomware families or at least doesn't show signs of it.
As most similar malware, Bydes will encrypt the majority of files found on a device, including media, archive, document and database files. Once the ransomware encrypts a file, it appends the ".bydes" extension after its original name. This means that a file formerly called "picture.jpg" would transform into "picture.jpg.bydes".
The ransom note is not dropped inside a plain text file like most other ransomware handles notes. Instead, Bydes displays the ransom note text inside its own GUI, in a window that has a countdown timer to supposed file deletion and several other buttons.
The full text of the ransom note goes as follows:
bydes
Your Files have been Encrypted!
WHAT HAPPENED?
Your important files are encrypted with military-grade encryption.
Read this carefully before doing anything, as your files depend on you and your actions entirely.
CAN I GET THEM BACK?
Yes, you can get them back.
You won't be able to revert them to their original state without our key.
If you wanna get your files back, follow the steps below.
HOW DO I GET THEM BACK?
It's easy and effortless, just follow the instructions.
Contact NAME on PLATFORM with your identifier and we'll help you get your files back.
Upon receiving your key, press "Decrypt" and fill in the key, your files will then be decrypted shortly.
IS THERE ANYTHING ELSE I SHOULD KNOW?
If you don't believe we can get your files back, you can try the decryptor below and choose to decrypt one file under 10KB.
Your files will be deleted after 48 hours if you don't decrypt your files in time.
It's strongly advised that you don't modify any encrypted files, try to delete or terminate this program and disable your antiviruses to ensure that your files won't be lost.
Good luck!
