What is Saba ransomware?
Saba is a computer virus classified as ransomware. These viruses encrypt files on victims’ computers with the intent of demanding money for decryption.
In this particular case, encrypted files receive .saba file extension to differentiate them from files encrypted by other similar viruses.
Saba virus leaves a ransom note, “_readme.txt”, to let the victim know what the hackers want for decryption. The sum is quite significant – 980 US dollars – and even the fact that the hackers offer a 50% discount doesn’t make it better. The “discount” is just a trap, after all; it’s in effect for the first three days after infection, to motivate the victims to hurry and pay.
The note (which can be read on the image above, by the way) attempts to convince the victim that paying the hackers is the only way to retrieve the files, but this is not entirely true. There are, in fact, other ways to remove Saba ransomware and decrypt .saba files. You can read about these methods in the guide below.