Things you must know about Symbiom
Symbiom virus has recently been brought to the spotlight after it was spotted infecting computers disguised as an illegal video game activation software (crack [1]). In particular, the victims claim to have downloaded a file called OverWatch_Hack.exe hoping to play the OverWatch game for free.
Unfortunately, what they are actually dealing with is a variant of the HiddenTear ransomware virus.
After opening the malicious file, victims lose access to a large portion of data stored on the computer. The data primarily includes victims personal files such as Office documents, archives, video/audio and image material, etc. Besides, the virus appends all encrypted files appended with .symbiom_ransomware_locked extensions.
The worst part of this is cyber infection is that even after Symbiom removal, the data remains encrypted. On the other hand, the cleanup procedure is necessary in case virus victims wants to continue using their devices normally again. Software like FortectIntego can be used for this purpose.
Among the documents the OverWatch virus will drop on the computer is a ransom note called README_Ransomware_Symbiom.txt. In this note, criminals demand 0.1 Bitcoin ransom. They also indicate the Bitcoin wallet address to which the ransom should be transferred and provide an email address hackerz6924@tutanota.com for further communication with the victim. The full note reads:
Your files have been locked by Symbiom!
Send 0.1 bitcoin (It is about 250 dollars) to: [Bitcoin wallet address edited out]
Afterwards, send your bitcoin address which you payed with to : hackerz6924@tutanota.com
Don’t worry. I will save your files if you pay.
GOOD LUCK!
While the 250 dollar ransom may not seem particularly large, given the fact that it gives back the ability to regain access to your data, paying is strongly unrecommended. When dealing with the criminals, there are no guarantees that your files will be restored even when you pay the money. Thus, it is wiser to remove Symbiom from the PC before establishing any contact with the criminals.
Ransomware distribution or how the virus infiltrates computers
Symbiom is a software attributable to the category of probably the most serious cyber infections — ransomware. These parasites are especially sneaky when it comes to infiltrating computers. Malware creators think of numerous ways to place the malicious codes on the system.
As Symbiom spreads disguised under OverWatch crack file, it is likely that its download links will show up on peer-to-peer networks [2], gaming forums, and similar sources.
Nevertheless, there are other ways the destructive payload can reach computers. For instance, it may be embedded through system or software vulnerabilities detected by exploit kits, fake software updates, compromised online advertisements or spam. So be careful out there!
Remove Symbiom easily
We have already mentioned that Symbiom removal is best performed using security software. FortectIntego, SpyHunterCombo Cleaner or MalwarebytesMalwarebytes can be relied upon for this task. The professional security tools will detect and delete the hazardous content from the PC in no time.
Just make sure you run the full system scan in Safe Mode. It will ensure you remove Symbiom virus smoother and prevent accidental errors.
Did this guide help?
Be the first to comment