Anubi ransomware

Anubi is a Windows file encryptor. Each locked file ends with the attacker address and then .anubi, as in file.jpg.[anubi[@]cock.li].anubi. Copies of __READ_ME__.txt hold the demand. A Run key labelled Adobe Acrobat Optimizer x86 relaunches it at logon. Windows workstations are the target. Its encryption runs slowly. No theft of data is on record.

Sources: In-house research

Decryptor: Decryptor availability has not been recorded.

Dealing with an active incident? Our incident response team is available 24/7.

Emergency response: +1 (877) 364-5161

Ransomware recovery services · provendata.com