Clop – A dangerous encryption ransomware

Clop is a virus of the ransomware category discovered by Jakub Kroustek. This malicious software is designed to encrypt data and rename each file with the extension “.Clop”. For example, “sample.jpg” would be renamed “sample.jpg.Clop”, and so on. After successfully completing the encryption, Clop generates a text file and places a copy in all folders. In addition, this file contains a message demanding the payment of a ransom.

Cybercriminals claim that the victim’s files are encrypted and only they are able to restore them. Unfortunately, this is true. It is not yet known whether Clop uses symmetric or asymmetric cryptography. However, in both cases each victim is assigned a unique decryption key that is needed to recover the data. The problem is that all the keys are stored on a remote server controlled by cybercriminals. Therefore, to receive the decryption key, victims have to pay a ransom but … As we have always said, none of this ensures that your encrypted data is returned to you and you only help to strengthen these cybercriminals.

According to research, a vast majority of ransomware developers ignore their victims once payments are made. For this reason, we strongly recommend that you ignore all requests to contact these people and make payments. Unfortunately, there are no tools capable of “cracking” Clop’s encryption to recover files for free or at least until now. The only solution is to restore everything from a backup copy.

Currently and unfortunately it is not known exactly how these developers propagate Clop. However, criminals almost always use the following methods: Trojans, fake software updaters, cracks, unofficial software download sources, and spam campaigns. In addition, we can prevent this situation, it is necessary to know that the two main reasons why the computer is infected are insufficient knowledge and reckless behavior. Be very careful when browsing the internet and it is essential to download, install and update computer software. Also, think twice before opening attachments or links in emails.

See also:
Apostle – Information cleansing threat and ransomware
Lazarus dangerous group of cybercriminals

---