Drik Ransomware

▤ Summary

After being delivered to the victims device, the Drik Ransomware will activate its encryption process and target a wide range of files. The Drik Ransomware assigns a unique ID number to the victim and then appends it to the names of the encrypted files. Upon locking all targeted files, the Drik Ransomware will drop two ransom notes on the infected device. It tells victims to establish contact with the attackers by sending a message to the same email address or their Telegram account. It states that victims must send their respective ID found in the note itself, as well as in the name of each encrypted file.

▦ Linked Companies

EnigmaSoft

$1M to $5M