Read Ransomware Will Lock Your Files

A recently discovered ransomware variant known as Read, associated with the Makop family, has been identified during the analysis of new file samples . This variant encrypts files, modifies their filenames, and generates a ransom note in the form of the "+README-WARNING+.txt" file while also changing the desktop wallpaper.

The Read ransomware adds a series of random characters, the email address readdecoding@outlook.com, and the ".read" extension to filenames. For example, it transforms "1.jpg" into "1.jpg.[2AF20FA3].[readdecoding@outlook.com].read" and "2.png" into "2.png.[2AF20FA3].[readdecoding@outlook.com].read."

The ransom note alerts the victim that their files have undergone encryption and are at risk of being exposed on the darknet. To prevent this and receive decryption instructions, the victim is directed to contact the attackers via email at readdecoding@outlook.com, providing their unique ID.

Read Ransom Note Contains Only a Single Email

The full very brief text of the Read ransom note goea as follows:

Your files are encrypted and stolen for publication on the darknet,
if you want to decrypt the files and do not want them to be published on the Internet

Contact us by email: readdecoding@outlook.com

Send me your ID and you will receive instructions for decrypting all files.

How Can You Protect Your Valuable Data from Ransomware?

Protecting your valuable data from ransomware requires a combination of proactive measures and cybersecurity best practices. Here are some strategies to help safeguard your data:

Regular Backups:
Perform regular backups of your important data. Store backups on an external device or a secure cloud service.
Ensure that backups are automated and scheduled to run consistently.

Update Software:
Keep your operating system, antivirus software, and all applications up-to-date. Regularly install security patches and updates to fix vulnerabilities.

Use Antivirus and Anti-Malware Software:
Install reputable antivirus and anti-malware software to detect and prevent ransomware infections.

Enable Automatic Updates:
Enable automatic updates for your operating system and software to ensure you receive the latest security patches promptly.