Evil Ransomware

Aliases: File0Locked KZ Ransomware

Malware type
ransomware
Family
Malware family
Profile updated
2026-07-07 13:27:07

Targeted regions: country_code:kz

Context

It’s directed to English speaking users, therefore is able to infect worldwide. It is spread using email spam, fake updates, attachments and so on. It encrypts all your files, including: music, MS Office, Open Office, pictures, videos, shared online files etc.. Domain KZ is used, therefore it is assumed that the decrypter is from Kazakhstan. Coded in Javascript

Reports & references

  • id-ransomware.blogspot.co.il — Evil Ransomware (report)
  • enigmasoftware.com — Evilransomware Removal (report)
  • usproins.com — Evil Ransomware Is Lurking (report)
  • twitter.com — 818443491713884161 (report)
  • twitter.com — 826508611878793219 (report)

External references