Hospitalhelper Ransomware

▤ Summary

Named Hospitalhelper Ransomware, the threat is capable of rendering a wide array of file types unusable by locking them with a strong cryptographic algorithm. The attackers then extort their victims for money by promising to provide the necessary decryption key and software tool that could potentially restore the encrypted data. The threat appends a new file extension consisting of .hospitalhelper, followed by a unique ID string that was assigned to the specific victim. In the ransom note, the attackers claim that the only way to restore the encrypted file is by paying them and getting the unique decryption key. Affected users can attach one locked file to their initial message that will then supposedly be decrypted for free.

▦ Linked Companies

EnigmaSoft

$1M to $5M