What is Killnet Ransomware?

Killnet is the name of a new strain of ransomware that was discovered in late October 2022.

Killnet is not a member of any specific ransomware family. The ransomware will encrypt the infected system, leaving files scrambled and unreadable.

Once encrypted, files receive a new extension in the form of the ".killnet" string. This will make a file named "photo.jpg" turn into "photo.jpg.killnet" once encrypted.

Affected file types and extensions include media files, archives, databases and executables, as well as media files.

The ransomware deposits its ransom note inside a file called "Ru.txt". The desktop wallpaper is also changed to an image of a hacker. The ransom note is in Russian and goes as follows:

Вы атакованы killnet_reservs

Донаты: @donate_killnet

Наш официальный @killnet_reservs

Поддержка @killnet_support

Основатель @killmilk_rus

Обменник t.me/killnetexchange

Резервный @killnet_mirror

Наш канал hxxps://t.me/killnet_reservs

Слава России Братья!