BitRansomware, also tracked as LolKek and DCryptSoft, is a Windows ransomware family whose builds differ mainly in the suffix they add. The earliest form appends .readme and leaves Read_Me.txt in each folder, pointing the victim to a Tor page with a personal ID and asking for Bitcoin, with the price doubling after two days. Later builds keep the same program but use other short suffixes, such as .MME and .U2K, and a ReadMe.txt note. Infections have been linked to pirated software and fake activation sites. No leak site is tied to the family. Member page: OBZ.
Sources: In-house research
File extensions: .MME, .readme, .U2K
Ransom note filenames: Read_Me.txt
Decryptor: Decryptor availability has not been recorded. Checked 2026-10-30.
Dealing with an active incident? Our incident response team is available 24/7.
Emergency response: +1 (877) 364-5161