Kadavro Vector Ransomware Will Scramble Your Hard Drive
Our team discovered Kadavro Vector, a type of ransomware, during the analysis of malware samples. The primary objective of ransomware is to encrypt the victim's data, which Kadavro Vector does by appending the ".vector_" extension to filenames, effectively blocking access to the files. The ransomware also displays a ransom note that is available in English, Russian, and Norwegian, informing the victims that their files will be permanently deleted after a specific time frame.
The encryption algorithm employed by the ransomware is highly secure, making file recovery nearly impossible. Victims are warned not to shut down their computers or disconnect from the internet, as doing so could result in the loss of more files. They are then instructed to pay $250 in Monero cryptocurrency to receive the decryption key for their files. Kadavro Vector alters filenames by adding ".vector_" to the end of the original file name, such as "1.jpg" to "1.jpg.vector_" and "2.png" to "2.png.vector_".
Kadavro Vector Uses Ransom Note in Three Languages
The very lengthy ransom note produced by the ransomware contains English, Russian and Norwegian text. The English part of it goes as follows:
English
All your files have been encrypted with the powerful Kadavro Vector ransomware.
Kadavro Vector is a well-designed ransomware that encrypts all your data, passwords, text data, exe handlers, projects, and a lot of recovery files. No one except our team is able to decrypt your files.
The first thing you need to do is follow our instructions. If you skip one step, you may regret your data.
1) Do not turn off the Internet. Why ?
- If you turn off your internet, KADAVRO VECTOR will lose connection with the server, and this will cause you to lose files even after paying for the decryption.
2) Do not turn off your computer. Why ?
- Turning off the computer will cause KADAVRO VECTOR to lose connection with the server as well. This will result in file loss. There is a small chance that the panel will appear after restarting / shutting down the computer, then you still have to pay
3) Carefully read the purchase of monero, monero is a crypto currency through which you will have to pay for the decryption of your files.
Send $250 worth of Monero to this address:
46RvQJ7RVMNXTu4aRRrrwuNJqogM7hA1z6B uBqC9robLeaVAT4LQdwLdHWEP9WZR8oRNowkAW5ghhPZjYmKTcPjd8sMPAmE
English
All your files will be deleted after the time specified on the screen
Files are deleted using one of the most secure algorithms (Air Force AFSSI-5020), without the possibility of recovery. Hurry up.
How Can Ransomware Like Kadavro Vector Infect Your System?
Ransomware like Kadavro Vector can infect your system through various means, including phishing emails, malicious attachments, infected software, and exploit kits. Phishing emails are designed to trick the recipient into clicking on a link or downloading an attachment that contains the ransomware. These emails may appear to be from a legitimate source, such as a financial institution or a trusted company.
Malicious attachments are another common method of infecting a system with ransomware. These attachments may be in the form of a PDF or Word document, an executable file, or a zip archive. When the victim opens the attachment, the ransomware is activated and starts encrypting files on the system.
Infected software is another way ransomware can infect a system. Cybercriminals can hide the ransomware in legitimate software and distribute it through various channels, including software download sites, peer-to-peer networks, and social media.
Finally, exploit kits are another way ransomware can infect a system. Exploit kits are toolkits that contain a set of tools and vulnerabilities that can be used to exploit security flaws in a victim's system. Once the exploit kit successfully gains access to the system, the ransomware can be installed and activated.
It is crucial to take precautions to protect your system from ransomware, including keeping your software up-to-date, using antivirus software, avoiding suspicious emails and attachments, and regularly backing up your files.
