What is Garsomware Ransomware?

Our examination of Garsomware revealed that it is a type of ransomware based on the Chaos ransomware. It encrypts files to prevent victims from accessing them, and adds a unique extension of four random characters to each file name. A file named "Garsomware.txt" is also created containing instructions on how to pay the threat actors for decryption.

For instance, "1.jpg" is renamed to "1.jpg.e9Ja" and "2.doc" is renamed to "2.doc.rs83." The ransom note instructs the victim to purchase a decryption tool for $1,500 in Bitcoin, providing the required amount and a Bitcoin address for payment.

The Garsomware ransom note

The complete text of the note produced by the Garsome ransomware goes as follows:

Your Computer is infected by Garsomware Say godbye to your computer!

What can I do to get my files back?You can buy our special
decryption software, this software will allow you to recover all of your data and remove the
ransomware from your computer.The price for the software is $1,500. Payment can be made in Bitcoin only.
How do I pay, where do I get Bitcoin?
Purchasing Bitcoin varies from country to country, you are best advised to do a quick google search
yourself to find out how to buy Bitcoin.
Many of our customers have reported these sites to be fast and reliable:
Coinmama - hxxps://www.coinmama.com Bitpanda - hxxps://www.bitpanda.com

Payment informationAmount: 0.1473766 BTC
Bitcoin Address: (alphanumeric string)

How can ransomware like Garsomware infect your home computer?

Ransomware like Garsomware can infect your home computer in a variety of ways. The most common way is through malicious emails or links sent to you by cybercriminals. These emails may contain malicious attachments or links that, when clicked, will download the ransomware onto your computer. Other methods include downloading infected files from the internet, visiting malicious websites, and using unsecured Wi-Fi networks. It is important to be aware of these threats and take steps to protect yourself from them. This includes avoiding suspicious emails and links, only downloading files from trusted sources, and using secure Wi-Fi networks whenever possible. Additionally, it is important to keep your operating system and software up-to-date with the latest security patches as this can help prevent ransomware infections.

How can you protect your important files against possible ransomware attacks?

Ransomware attacks can be devastating, so it is important to take steps to protect your important files. Here are some tips for protecting your files against possible ransomware attacks:

1. Back up your data regularly: Regularly backing up your data is one of the best ways to protect yourself from ransomware attacks. Make sure you back up all of your important files and store them in a secure location, such as an external hard drive or cloud storage service.
2. Use strong passwords: Create strong passwords for all of your accounts and change them regularly. This will help prevent hackers from accessing your data if they manage to get into one of your accounts.
3. Keep software updated: Make sure that all of the software on your computer is kept up-to-date with the latest security patches and updates. Outdated software can be vulnerable to attack, so make sure you keep everything updated.
4. Install antivirus software: Installing antivirus software on your computer can help protect against malicious programs like ransomware by detecting and blocking any suspicious activity before it has a chance to cause damage.
5. Be cautious when opening emails and attachments: Be wary of any emails or attachments that come from unknown