G-james pfp
G-james
@g-james
During encryption, this malware appends the ".BTC" extension to the name of each encrypted file (for example, "sample.jpg" becomes "sample.jpg.BTC"). Following successful encryption, BTC creates a text file ("BTC_DECRYPT_FILES.txt") and places it on the desktop.
0 reply
0 recast
0 reaction