The Priapos Ransomware is a new threat whose ransom message is stylized in a way very similar to the one used by the Globe Ransomware’s notes. However, both threats don’t seem to share any other similarities, and it is likely that the Priapos Ransomware is a stand-alone file-encryption Trojan. This is why it is impossible to tell whether the Priapos Ransomware uses a flawed encryption or not, and if any of our readers have had their data taken hostage by this threat, then they might not be able to fully recover from the attack at the moment. The way the Priapos Ransomware carries out its attack isn’t surprising – once a computer’s security has been bypassed, the Priapos Ransomware will seek to encrypt popular files such as documents, images, databases, archives, small videos, etc. If a file is encrypted successfully, the threat will change its extension to ‘.PRIAPOS’ (e.g. ‘audio.mp3’ will be renamed to ‘audio.mp3.PRIAPOS’).
During the attack, the Priapos Ransomware will make sure to disable the Windows System Restore service, as well as to wipe the Shadow Volume Copies, therefore making it less likely that victims will be able to restore their data via free utilities. The ransom note is stored in the file ‘Instructions!!!.hta’ and, as mentioned earlier, it looks like the ransom note used by the Globe Ransomware. However, the version of the Priapos Ransomware has different demands, and it tells users that they have to pay a staggering 1.5 Bitcoins if they want to have their data restored by the authors of the Priapos Ransomware. The attackers provide their victims with an e-mail address that can be used to contact them – [email protected]. The note states that victims can have one of their files decrypted for free as proof that the authors know how to complete the decryption operation. We advise victims to take advantage of this offer since it can, at least, reduce the damage that the Priapos Ransomware has caused slightly.
‘All your files have been encrypted!
All your files have been encrypted due to a security problem with your PC.
15643990****
You have to pay for decryption in Bitcoins. The price depends on how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files.If you want to restore them, write us to the e-mail [email protected]
Before paying you can send us up to 1 files for free decryption. The total size of files must be less than 10Mb (non archived), and files should not contain valuable information.
The amount you need to pay to receive your files 1.5(Bitcoin)
How to obtain Bitcoins
• The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click ‘Buy bitcoins’, and select the seller by payment method and price.
• Bitcoin:
http://www.localbitcoins.com (Visa/MasterCard, QIWI Visa Wallet, Bank Transfer.)
1.5 BTC
If I can not connect through the mail, I can not
• [email protected]
In the reply letter you will receive a program for decryption.
After starting the decryption program, all your files will be restored.
Attention!
• Do not try to uninstall the program or run antivirus software
• Attempts to self-decrypt the files will lead to the loss of your data
• Decoders of other users are incompatible with your data, as each user has a unique encryption key’
Sadly, there isn’t a free decryptor available for the Priapos Ransomware yet. This means that if your data has been locked by the Priapos Ransomware’s encryption, then there isn’t a reliable way to recover from the attack. However, we assure you that paying the ransom sum that the Priapos Ransomware’s authors demand is also not a viable solution, and there’s a significant chance that victims who pay the money may end up not receiving any decryption tool in return. The wise thing to do in situations where you have to deal with undecryptable ransomware is to eliminate the harmful application by using a trustworthy anti-virus application.
[template:aliases][template:removal][template:technical_title][template:files][template:registry][template:additional]
