Remove Kabil Ransomware
Cybercriminals often rely on pre-made malware, which can be edited to create a payload, which looks brand new. Such is the case with the Chaos Ransomware, which has been used by cybercriminals for over two years. Recently, a new update of it has been detected – the Kabil Ransomware. The updates are just cosmetic, and the core functionality remains unchanged. Unfortunately, this means that the Kabil Ransomware's file-locking mechanism is impossible to decipher, and its victims may have a tough time recovering their data.
When the Kabil Ransomware infects a device, it proceeds to encrypt files on the hard drive and removable storage. After this, it marks the files with the '.kabil' extension. In the meantime, the malware also makes sure to limit the victim's recovery options by wiping out System Restore points and Shadow Volume Copies. Finally, the Kabil Ransomware drops the 'read_it.txt' ransom note.
The message of the criminals is not surprising – they demand $300 via Bitcoin in exchange for the decryptor. They ask the victim to contact them at kabilransomware@protonmail.com if they have any questions. Also, the crooks provide instructions on how to purchase and send Bitcoin. You can rest assured that trusting the criminals behind the Kabil Ransomware attack is a bad idea - they could easily scam you. Instead, you should use an anti-malware tool to dispose of the threat, and explore alternative data recovery options.
