That file, dh35s3h8d69s3b1k.exe, can be 'used to create a PowerShell script based on the shared source of the Hidden-Cry decrypter,' according to Cyren. These include the somewhat farcical revelation that the cybercriminals have embedded the decrypting tool in the malware download itself. 'We believe it is possible for victims to recover deleted files,' the Cyren researchers stated, 'given the simple method used to delete the files.' Those researchers have also suggested two possible methods that can be used to decrypt your files without paying a ransom for the decryption password. Should you pay the Fortnite hack ransom?Īs mentioned previously, there is some potential good news in that the source code of the Hidden-Cry ransomware behind the Syrk facade has already been widely distributed online.
That warning states that if the payment isn't made before the displayed two-hour countdown timer reaches zero, then files in the photo folder will be deleted, followed by the desktop and document folders. A message is displayed to the victim demanding an unspecified ransom is paid and an email contact given to get instructions on how to do this.
