SunnyDay Ransomware
Summary
The threat has been tracked as the SunnyDay Ransomware by the infosec community and is capable of encrypting a wide range of different file types. Victims will notice that nearly all of their documents, PDFs, databases, archives, photos, etc., now have .SunnyDay appended to their original names. Furthermore, when the threat has finished processing the data on the breached machine, it will create a text file named !-Recovery_Instructions-!.txt. Indeed, the hackers claim to have managed to collect important information from the compromised devices, which is now stored on a private server. If victims refuse to pay the demanded ransom, not only will the hackers not assist in the restoration of the encrypted files but they threaten to either release the obtained data to the public or try to sell it to interested parties.
Classifications
AskAI Classifications
LabelsLinked Companies
