CryptoJacky Ransomware is a type of malware that encrypts your files and demands a ransom to decrypt them. It typically arrives on your computer through an email attachment or a malicious website. Once it's installed, CryptoJacky will scan your computer for files to encrypt and then demand a ransom to decrypt them. CryptoJacky usually uses the ".crypted" or ".cryp1" extension to mark the encrypted files.

What encryption methods does CryptoJacky use?

CryptoJacky uses the RSA-2048 and AES-256 encryption algorithms to encrypt your files. This makes it very difficult to decrypt your files without the decryption key, which is only known by the attackers.

What types of files does CryptoJacky encrypt?

CryptoJacky will encrypt most types of files, including documents, photos, videos, and more. It will even encrypt files on external drives that are connected to your computer.

How much is the ransom?

The ransom demanded by CryptoJacky varies, but is typically around 2 Bitcoins. The attackers may also threaten to delete your encryption key if you don't pay within a certain time period.

History

CryptoJacky Ransomware was first discovered in August 2016. We believe it to be a variant of the CryptoLocker Ransomware. Initially, CryptoJacky was distributed only through spam emails. The email would contain an attachment that, when opened, would download and install the CryptoJacky Ransomware on your computer. In November 2016, attackers released a new version of CryptoJacky that used the Necurs Botnet to distribute the ransomware. This version of CryptoJacky would encrypt your files and then display a ransom note that demanded you pay 1 Bitcoin to decrypt your files. The Necurs Botnet is a network of infected computers that can be used to distribute spam emails or distribute malware.In December 2016, they released a new version of CryptoJacky that used the EITest attack vector to infect computers with CryptoJacky Ransomware. The EITest attack vector is a method of injecting malicious code into legitimate websites. When you visit an infected website, the malicious code will automatically download and install CryptoJacky Ransomware on your computer.In January 2017, they spotted CryptoJacky Ransomware being distributed by the Rig Exploit Kit. The Rig Exploit Kit is a tool that criminals can use to exploit vulnerabilities in your computer and install malware.In February 2017, we saw CryptoJacky Ransomware being distributed by the Sundown Exploit Kit. The Sundown Exploit Kit is a tool that criminals can use to exploit vulnerabilities in your computer and install malware.In March 2017, CryptoJacky Ransomware was being distributed by the Magnitude Exploit Kit. The Magnitude Exploit Kit is a tool that criminals can use to exploit vulnerabilities in your computer and install malware.

Protection

-Install an anti-malware program to protect your computer from CryptoJacky Ransomware and other malware.- Keep your operating system and software up to date.- Use a strong, unique password for each online account.- Use a firewall to block incoming connections from the Internet.- Avoid opening email attachments from people you don't know.- Avoid clicking on links in email messages from people you don't know.- Be cautious when downloading programs from the Internet.

What should you do if you're infected with CryptoJacky?

If you have CryptoJacky Ransomware on your computer, it is important to remove it immediately and not pay the ransom. There are no guarantees that paying the ransom will actually decrypt your files, and in some cases, paying the ransom may even make your situation worse.There are several ways to remove CryptoJacky Ransomware from your computer. You can use an anti-malware program to scan and remove the malware, you can try to remove it manually, or you can use a decryption tool.

Anti-Malware Programs:

There are many anti-malware programs that can detect and remove CryptoJacky Ransomware. We recommend using Malwarebytes or HitmanPro to scan and remove the malware.

Manual Removal:

If you are experienced with computers, you can try to remove CryptoJacky Ransomware manually. However, this is a very difficult process, and we do not recommend attempting it unless you are an experienced computer user.

Decryption Tool:

There is currently no free decryption tool available for CryptoJacky Ransomware.

Contact a data recovery service

If something goes wrong during the CryptoJacky removal process and you are not able to restore your files, you can contact a data recovery service.SalvageData is a data recovery company that specializes in ransomware recovery. We have a 96% success rate and offer a free consultation.Pricing depends on the type of files you need to recover and how much data you have. Contact us now to get started. If you prefer, you can also go to the nearest data recovery center and request help there.