NoCry new ransomware inspired by WannaCry

The WannaCry Ransomware infection is undoubtedly one of the most famous file encryption Trojans that have been seen in recent years. It has inspired lots of cybercriminals to take advantage of its popularity and create file closets with a similar name. One of the most recent threats to follow this pattern is NoCry Ransomware.

NoCry ransomware is malicious software that has been created to encrypt victims’ files and then request a hefty ransom fee for their recovery. The threat transforms the target files with a strong encryption algorithm and takes them out of service. Then add the .cry extension to their names.

Decryption of .cry files is a complex process that requires a special decryption tool. This tool is owned by the cybercriminals behind all malicious NoCry ransomware attacks. This information is revealed by a ransom message that falls on ransomware infected machines.

As we always have, it is best and most advisable to refrain from negotiating with hackers by email or any other available channel. Even a successful ransom payment offers no guarantee that you will receive a working decryption tool and key for it.

When ransomware like NoCry runs on a computer system, it initiates many malicious operations that help it evade detection and encrypt personal files. Unfortunately, the attack can go unnoticed until its end. One thing that can eventually help you catch a ransomware attack before it’s too late is slower system performance.

The strong encryption algorithm that NoCry uses to encrypt files makes corrupt files completely inaccessible. Unfortunately, you may not be able to use your most valuable files, including: Sound files, Video files, document files, Image files, Backup files, Bank credentials, etc.

The so-called NoCry ransomware is a threat with a very complex code that interrupts the system security to encrypt personal files. Therefore, you could safely use the infected system after deleting all the malicious files and objects created by the ransomware. It is also worth mentioning that personal data remains encrypted even after the complete removal of NoCry ransomware. Removing it only prevents it from causing further encryption and security problems.

Other reads:
EternalBlue was the exploit used by WannaCry
WannaCry, one of the biggest cyberattacks in history
eCh0raix is the ransomware that targets NAS devices

---