Remove Prometheus Ransomware
The Prometheus Ransomware is a file-encryption Trojan whose creators claim to be affiliated with the REvil Ransomware gang. While this is yet to be confirmed, it is clear that Prometheus Ransomware's file-locking mechanism is very strong – it is impossible to crack or reverse it via free utilities. Once the Prometheus Ransomware infects a computer, it will execute a swift attack meant to encrypt the contents of important files. When the Prometheus Ransomware locks a file, it will append an ew extension to its name, usually representing the victim's ID.
Of course, ransomware operators only have one thing on their mind – getting money from their victims. Prometheus Ransomware's creators are not any different, and their malware will drop two ransom notes that extort the victim for money. The documents, called RESTORE_FILES_INFO.hta and RESTORE_FILES_INFO.txt have similar contents.
The gang behind the Prometheus Ransomware project is also abusing a new tactic to extort the victim for money. Not only do they encrypt files, but they also steal the original copies and transfer them to their server. They threaten the victim that failure to pay the ransom fee will result in:
- Having their decryption key purged.
- Having their stolen data leaked or sold online.
Needless to say, these threats are very severe. However, paying the ransom fee is a terrible idea most of the time. If you agree to do this, the criminals may end up asking you for money or even ignoring your messages.
Co-operating with cybercriminals is never the right choice. If you are a victim of the Prometheus Ransomware, we suggest running an anti-malware tool to terminate the threat. After this, start restoring files from a backup or use alternative data recovery options.
July 2021 Update! - REvil Ransomware Cybercrooks Launch New Attacks on Hundreds of Businesses During July 4th Holiday
The REvil Ransomware attacks were discovered on Friday, July 2nd right after REvil hackers used a software update to attack Kaseya’s remote desktop services. The attack prompted the company to shut down its SaaS servers to protect customer data. The precautionary measures taken potentially reduced the dire consequences of the attack. Other companies attacked may not have been so lucky as ransomware threats like REvil lock data through encryption and leave some organizations no other choice but to pay a substantial ransom fee potentially in the millions of dollars to get there data back.
