.RYK 文件扩展名
Ryuk Ransomware Encrypted File
| 开发者 | 不适用 |
| 受欢迎程度 |
4.0 | 2 票 |
什么是 RYK 文件？
An RYK file is a file that has been renamed and encrypted by Ryuk ransomware, which is malware distributed by cybercriminals. It contains a normal file, such as a document or database, that the ransomware is holding hostage. RYK files cannot be decrypted.
更多信息
In 2018, users first began reporting the existence of Ryuk ransomware. Named after a death god from the manga Death Note, Ryuk is distributed primarily by Russian criminal cartels. The cartels tend to target large organizations that have a large amount of essential data, network entry points, and money.
After a user's computer becomes infected by Ryuk, the ransomware targets what it believes to be the user's essential files, as well as any files stored on a network drive. Ryuk encrypts these files and appends them with the .ryk or .rycrypted extension. The ransomware then attempts to delete or disable any backup files and system restore points it can find, to ensure users must pay the ransom to decrypt their files. At that point, the criminals behind Ryuk reach out to the infected user or organization, asking for a ransom paid in Bitcoin. (FileInfo recommends you never pay a ransom to decrypt your files.)
How did my computer get infected by Ryuk ransomware?
Ryuk is most commonly distributed via phishing emails designed to trick recipients into downloading and executing the ransomware. However, in early 2021, a new, self-propagating variant of Ryuk ransomware was discovered. This variant of Ryuk can jump from computer to computer within a network, meaning you may not have downloaded anything suspicious, and your computer may still be compromised.
如何打开 RYK 文件
Because RYK files are encrypted and cannot be decrypted, you cannot open them. Typically, your best option for restoring ransomware-encrypted files to their previous state is to perform a System Restore. However, Ryuk typically disables this option. At this time, there is no solution for restoring RYK files to their previous state.
警告
FileInfo.com recommends you never pay a ransom to decrypt files encrypted by ransomware. Paying a ransom encourages ransomware distributors to continue their efforts, and there is no guarantee that paying a ransom will give you access to your files. Instead, you should restore your data from a recent backup created before the ransomware infected your computer.