[template:parasites-id:MoonCryptor Ransomware]
The MoonCryptor Ransomware is a low-quality file locker, which is still in development probably because it refers users to an offline payment portal. Regardless of the lack of a payment page, the MoonCryptor Ransomware appears to be fully functional since it has the ability to encrypt the contents of various files found on the victim’s computer. Just like other members of the ransomware family, this one also targets some of the most popular file types – images, videos, songs, documents, and archives are just some of the content its encryption module will attempt to cipher.

The MoonCryptor Ransomware’s attack is fairly easy to recognize because this threat appends the ‘.fmoon’ extension to the names of the compromised files. The ransom message this threat uses is not delivered via an HTML or text file and; instead, the authors have opted to deliver their demands in a new program window titled ‘MOON DECRYPTOR.’ The message delivered does not reveal much, but it’s important to note that the authors give their victims a very short timeframe to pay the ransom sum. They state that if the transaction is not completed within 20 minutes, the MoonCryptor Ransomware will begin deleting one file per minute randomly. However, this threat is made-up, and the MoonCryptor Ransomware does not perform such a task. However, on the right side of the window is a reverse countdown, which states that the threat will begin wiping files in 6 days. It is likely that the authors have not yet decided which warning message they should use to scare their victims so that they’ve included both of them for now.

The ‘MOON DECRYPTOR’ window also features a link to an online payment page which, as we already mentioned, is offline. Beneath the link are the unique victim ID, as well as the public key used to lock their files. The author states that this data needs to be entered on the payment page.

Since the MoonCryptor Ransomware is not being distributed, it is unlikely that random users will end up executing this threat on their computers. However, regardless of this, you should remember that the way to fight ransomware is by not agreeing to meet the demands of its authors. Don’t pay the money and, instead, take the matter into your own hands by using a trustworthy anti-virus software suite to wipe out all corrupted files from the computer.
[template:aliases][template:removal][template:technical_title][template:files][template:registry][template:additional]