What is RAMP ransomware?
RAMP is a new ransomware program. It claims to be made by Killnet, a Russian hacker group, however this claim is unverified. Much like any other ransomware program, it encrypts all files it can find. After the encryption, the files are also renamed, receiving .terror_ramp3 file extension. To illustrate, a file named “todo.doc” would be renamed to “todo.doc.terror_ramp3”.
The virus also leaves a ransom note, named “ramp3.txt”. The note appears to be in Ukrainian. Those who speak the language may read the original note on the image above. For the rest of us, here’s the translation.