GCNI Ransomware

▤ Summary

The strong encryption algorithm employed by GCNI is capable of locking any of the numerous targeted file types completely. Victims who wish to restore access to their data are extorted by the attackers who will supposedly send the needed decryption key after being paid. They also should try to contact the hackers within 48 hours of the attack or risk having to pay double the initial ransom amount. If victims take too long to establish contact, the decryption key necessary for the restoration of their data will be deleted from the servers of the hackers, rendering the files unrecoverable. As part of their message, victims are told to send a couple of locked files that should be decrypted and returned for free.

▦ Linked Companies

EnigmaSoft

$1M to $5M