Amnesia2 ransomware

Amnesia2 is a Windows encryptor written in Delphi. AES-256 locks the data, and .amnesia is added to each name. A demand file, HOW TO RECOVER ENCRYPTED FILES.TXT, lands on the Desktop and tells victims to send an email. Windows workstations are the target. No theft of data is on record.

File extensions: .amnesia, .frogo, .ransomware

Decryptor: A free decryptor is available.

Sources: Emsisoft

Dealing with an active incident? Our incident response team is available 24/7.

Emergency response: +1 (877) 364-5161

Ransomware recovery services · provendata.com