Alkhal Ransomware

Ransomware attacks have been on the rise around the world, and with that comes a new threat, Alkhal ransomware.

It acts like a Trojan horse, it is downloaded through files, emails, malicious websites, program downloads, these are just a few ways. After being downloaded the ransomware installs itself on the operating system.

Alkhal ransomware can invade the internal network of a company and compromise all stored files, whether in databases or even virtual machines.

After encrypting the files, the .alkhak extension is automatically added to all files, and an image is created with the terms for the ransom with the name “Recovery.bmp” and also a document is generated with the name “ReadMe.txt”, in it contains the information for the victim to get in touch. The group usually uses two emails: ‘alkhal@tutanota.com’ and ‘cyrilga@tutanota.com’.

The ransomware groups are only after money, so they create strategies to pressure the victim to pay as soon as possible, even though the release of the decryption key is not guaranteed after the ransom is paid.

The recommended thing to do after suffering a ransomware attack is to inform the authorities about the attack and, immediately, seek a company specialised in recovering encrypted data. Time in such cases is key to decreasing the financial damage caused by ransomware.

So as soon as you identify that your data has been encrypted by Alkhal ransomware contact Digital Recovery to get the recovery done as quickly as possible.