Remove FantaroX Ransomware

A second variant of the Chaos Ransomware has been identified in the wild recently. The newly detected threat is called the FantaroX Ransomware, and it shares the same modus operandi as the original Chaos Ransomware. Once it infects a device, it begins scanning the file system, looking for files to encrypt. Naturally, the primary targets of the FantaroX Ransomware are files that are likely to contain important data – images, videos, documents, spreadsheets, archives, and others. Whenever it locks a file, the malware adds the '.fantarox' suffix to its name.

Another change that the FantaroX Ransomware brings is the creation of the 'read_it.txt' document on the desktop. Naturally, this file will not be encrypted – because it contains a message from the attackers. According to the messag,e the hackers are demanding a ransom payment of 10,000 Hungarian forint, which is a rather unusual request – especially considering the fact that they do not mention a payment method. Instead, they simply ask the victim to send a message to fantarox@protonmail.com for additional details.

The FantaroX Ransomware's message is also only available in Hungarian, so this is likely to mean that this is the region that this file-locker is active in. Needless to say, you should never accept to send money to anonymous hackers, since they could easily end up scamming you. Instead, use an anti-malware tool to dispose of the FantaroX Ransomware, and then explore other data recovery options.