The Ranssiria Ransomware is a file-encryption Trojan, which appears to originate from either Brazil or Portugal since the language used in the ransom note is Portuguese. However, surprisingly, the text of the ransom message mentions a topic that is not linked with Portugal nor Brazil closely – the Syrian refugees who are fleeing away from the war-torn zone that is Syria. According to the authors of the Ranssiria Ransomware, all ransom fees paid to them will be used to help the Syrian refugees around the world – a cause that might be noble. However, it is very unlikely that any of the money sent to the Ranssiria Ransomware’s authors will be used to provide to those in need. It appears that the con artists behind the Ranssiria Ransomware have included images and videos from the Syria war to guilt trip their victims into agreeing to pay the ransom money.
Unfortunately, the good intentions that the cybercrooks have when it comes to Syrian refugees will not be of any help if you end up being the victim of the Ranssiria Ransomware. This threat is capable of fully encrypting a long list of file formats, therefore ensuring that the victims will not be able to access their contents unless they manage to decrypt them first. Sadly, the Ranssiria Ransomware is not decryptable at the moment, and its victims will not be able to rely on a free & reliable decryption software to help them get their data back. Regardless of this, you can rest assured that paying the ransom sum that the Ranssiria Ransomware demands also is not a viable option since they provide no proof that they are capable of reversing the damage that their threatening program causes.
It seems that the authors of the Ranssiria Ransomware have also copied the design choices used by the cybercrooks behind the WannaCryptor Ransomware (WanaCrypt0r Ransomware) since the Ranssiria Ransomware uses an identical lock screen. The price that the Ranssiria Ransomware’s victims are asked to pay in exchange for decryption software is quite serious – 77.7 Litecoins, which are valued at about $12,000. Needless to say, you should not send any money to the attackers since they are unlikely to use the money for good causes, and there’s a significant risk that you will not get your files back.
If you believe that the Ranssiria Ransomware has taken your data hostage, then we advise you to remove the threatening application with the assistance of a trustworthy anti-virus tool immediately. Unfortunately, this will not get your files back to their regular state, and you might need to look into alternative file recovery methods.