World2022decoding Ransomware Uses Generic Name
World2022decoding is the name of a new strain of ransomware that does not seem to belong to any particular family of ransomware clones.
World2022decoding will encrypt files on the targeted system, leaving the majority of them scrambled. Affected file types include media, archive, document and database files. Once encrypted, files receive two strings appended to their names - the victim ID code and the ".world2022decoding" extension.
This will effectively make a file named "document.txt" turn into "document.txt.[victim ID string].world2022decoding" once encrypted.
The ransom note is dropped inside a .MHT file named "WE CAN RECOVER YOUR DATA". The full text of the ransom note is as follows:
YOUR FILES ARE ENCRYPTED
Your files, documents, photos, databases and other important files are encrypted.
You are not able to decrypt it by yourself! The only method of recovering files is to purchase an unique private key. Only we can give you this key and only we can recover your files.
To be sure we have the decryptor and it works you can send an email: world2022decoding@onionmail.com and decrypt one file for free. But this file should be of not valuable!
Do you really want to restore your files?
Write to email: world2022decoding@onionmail.com
Reserved email: world2022decoding@jabb.im
Your personal ID: -
Attention!
Do not rename encrypted files.
Do not try to decrypt your data using third party software, it may cause permanent data loss.
Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.
