What is Mafer ransomware?
Mafer ransomware is a harmful program that belongs to the VoidCrypt ransomware family. It includes many other viruses such as Rar and Joker.
Mafer ransomware operates in a very typical (for ransomware) fashion. First, and rather obviously, it encrypts all files on the infected computer; it wouldn’t be much of a ransomware if it didn’t do that. It also renames the encrypted files, adding certain information to their names. Specifically, it adds a unique ID, the hacker’s email, and .Mafer file extension. Lastly, it creates a ransom note, “Read_Me!_.txt”, which can be read on the image above.
The note, due to its misuse of capitalization and poor English, is rather hard to read, so we will summarize its contents. It assumes that the victim is a company and doesn’t mention the decryption price. It does however mention that the cost will double after 48 hours, and that the hackers expect to be paid in Bitcoin.
It is generally not recommended to interact with cybercriminals, since they might just disappear with your money and not decrypt your files at all. And if you’re not a company, and were targeted by mistake, you don’t have this option at all. Read our guide to explore your other options; ways to remove Mafer ransomware and decrypt .Mafer files without contacting the hackers.