Payransom500 is ransomware known for encrypting numerous file types by leveraging a strong encryption algorithm. Like with most ransomware strains, the victims are instructed to contact the hackers and pay the demanded ransom to receive the necessary decryption key and software.
Payransom500 can be identified by the fact that it appends the locked filenames with a new extension ‘@payransom500’ followed by an ID number assigned to the specific victim. Payransom500 also delivers a ransom note contained in a text file named ‘!!! ALL YOUR FILES ARE ENCRYPTED !!!.TXT.’
The Payransom500 Ransom Note
According to the Payransom500 ransom note, victims must transfer $500 to the provided crypto-wallet address using Bitcoin. Like with many other ransomware types, the hackers behind Payransom500 Ransomware offer to decrypt a single locked file for free via the email address and Telegram accounts. The accounts mentioned in the ransom note are as follows: ‘payransom500@mail2tor.com’ and ‘@payransom500.’
How Do I Remove Payransom500 Ransomware?
Just like with other ransomware we have regularly discussed in previous videos, we recommend detecting and removing Payransom500 ransomware using reputable malware remediation software.
