CompuTips

What is Saturn ransomware

Saturn is a new ransomware variant that is actively distributed right now. Saturn has its own affiliate program, offering anyone to create an account, download their own version of Saturn encryptor and distribute it, earning revenue share when their victims pay ransom. Because of this Saturn may be distributed in many different ways (spam emails, pop-ups asking users to download something, RDP brute force attacks, etc.), and the amount of ransom asked may vary. Once on a computer, Saturn encryptor encrypts users’ files and drops #DECRYPT_MY_FILES#.txt and #DECRYPT_MY_FILES#.html ransom notes and #KEY-[user-id].KEY file into every folder where files were encrypted. Unfortunately, security researches that have studied Saturn say that it uses a secure encryption method, and files cannot be decrypted without the decryption key. There still may be a slim possibility to recover files for free if Saturn creators release decryption keys to everyone in the future (that has happened with several ransomware variants before) or if their Command and Control servers are seized by law enforcement. There are also ways of file recovery that may work and recover at least some encrypted files. You may use instructions below to remove Saturn from your computer and try to recover encrypted files. READ MORE