Remove CHRB Ransomware
The Matrix Ransomware family has been relatively inactive in 2021, but it does not seem to be dead just yet. Recently, antivirus products identified a new version of the Matrix project. The threat, named CHRB Ransomware, is able to cause long-lasting damage to the important files of its victims. Reversing the damage is not an easy task because the decryption key is stored on the servers of the attackers. Of course, they will not share it with anyone – they demand to receive a ransom payment in exchange for the decryption service. However, paying the creators of the CHRB Ransomware is a terrible plan – they might scam you, ask you for more money, or even fail to provide a working decryptor. For example, there have been cases where ransomware victims got the wrong decryption key, but the criminals never tried to fix the problem Another variant of the Matrix Ransomware is the MMTA Ransomware.
CHRB Ransomware May Hide in Pirated Content
Internet users may come across the CHRB Ransomware while interacting with fake downloads, suspicious advertisements, pirated content, or unknown email attachments. The criminals are using all sorts of infection vectors to increase their chances of infecting as many people as possible. When the CHRB Ransomware takes over a system, it will immediately proceed to encrypt the victim's important data. Once it locks a file, it will change its name entirely by using the pattern '[RecoveryData1@cock.li].<RANDOM CHARACTERS>.CHRB.
The attack ends with the creation of the document '!README_CHRB!.rtf.' It explains the attack to the victim and assures them that the recovery of their files is possible – as long as they opt to trust the anonymous cybercriminals. The crooks do not specify the ransom fee, but we assure you that it will not be cheap. They only supply three emails for contact - recoverydata1@cock.li, recoverydata1@protonmail.com, and recoverydata1@protonmail.com.
If the CHRB Ransomware has taken over your system, you should not panic. Ignore the offer of the criminals. Run a malware removal to clean off the infected files. After this, experiment with alternative data recovery tools.
