Ghas Ransomware

▤ Summary

The Ghas Ransomware is a threat created to lock the data of its victims specifically. The attackers will then extort the affected users for money, in exchange for restoring their access to important personal and business-related files, such as documents, PDFs, databases, archives, photos, etc. When all targeted file types have been processed and rendered inaccessible, the malware will deliver a note with instructions from the threat actors. The ransom-demanding message associated with the Ghas Ransomware is almost completely identical to the notes found in other STOP/Djvu infections. The hackers state that they will assist with the restoration of the locked data only after the victims have transferred them a ransom of $980.

▦ Linked Companies

EnigmaSoft

$1M to $5M