Avaddon Ransomware (. Avdn File) Removal Guide
What Is Avaddon Ransomware? the Avaddon Ransomware Encrypts User Data Using Aes-256 and Rsa-2048, and Then Requires a Ransom of $150 to $350 or More in Btc in...
What is Avaddon Ransomware?
The Avaddon ransomware encrypts user data using AES-256 and RSA-2048, and then requires a ransom of $150 to $350 or more in BTC in order to return the files.
The distribution of this ransomware began in early June 2020. For the first time, Avaddon Ransomware was presented at one of the hacker forums that we know but do not want to “advertise” it again. And the extortionists themselves seem familiar to me, although they “write” their “creations” every time from scratch, the style and other elements of their “creativity” are easily guessed.
Avaddon Ransomware is targeted at users of several languages, contributing to the greatest distribution around the world. Judging by the ransomware onion site, these will be the following languages: English, German, Spanish, French, Italian, Portuguese, Chinese, Japanese, Korean.
Avaddon Ransomware ― Summary
| Name | Avaddon Virus |
| Extension | .avdn file virus |
| Type | Ransomware |
| Ransom | From $150 to $350 |
| Detection | Ransom:Win32/Avaddon.PA!MTB |
| Short Description | The ransomware modifies the documents on the attacked device through encryption and asks for the ransom to be paid by the victim supposedly to restore them. |
| Symptoms | The file virus encrypts the data by adding the .avdn extension, also generating the one-of-a-kind identifier. Note that the .avdn extension becomes the secondary one. |
| Distribution Method | It can be spread by hacking through an insecure RDP configuration, using email spam (the subject line of the message “Your new photo?” Or “Do you like my photo?”) And malicious attachments (for example, Image.jpg.js.zip), fraudulent downloads , botnets (Phorphiex / Trik), exploits, malicious ads, web injects, fake updates, repackaged and infected installers. |
| Technical Info | Written in C ++ using WinAPI. AES-256 and RSA-2048. Designed for Windows 7-10. |
| Fix Tool | See If Your System Has Been Affected by .avdn file virus |
Must Read
Avaddon ― Spam campaign
The new Avaddon Ransomware has come alive in a massive spam campaign targeting users worldwide. The first attack of the Avaddon is being in a spam campaign reminiscent of Nemty Ransomware.
In a wave of emails using subjects like “Your new photo?” or “Do you like my photo?” containing nothing but a winking smiley face, a JavaScript downloader for the Avaddon ransomware is being distributed.">1
That means to the recipient, it would just appear as a .jpg file, as shown below.
Attached to these emails is a JavaScript file masquerading as a JPG photo with names like IMG145673.jpg. It is important to remember that Windows hides file extension by default, even though it is a known security risk.
Elena Rostova holds a Master's degree in Public Health Journalism. She covers groundbreaking medical research, holistic wellness trends, mental health awareness, and nutritional science.
