The U.S. Government’s Cybersecurity and Infrastructure Assurance Agency states that Ransomware is a constantly-evolving type of malware that encrypts files on a device. This renders any files and systems that rely upon them inaccessible. Ransomware actors demand ransom to decrypt the files. Ransomware actors are known to target authentication information or data that has been stolen and threaten to sell it or leak it if they don’t get paid.
What does this mean? Hackers exploit security weaknesses to steal confidential data and lock files. Once you have paid the ransom, these criminals won’t give you access to your system or return files.
WannaCry, 2017, was the first significant ransomware outbreak. Ransomware attacks can be profitable and were demonstrated by the WannaCry attack, a large-scale and well-publicized incident. Since then, there have been dozens of ransomware variations and have been used in many attacks.
Ransomware has seen a recent rise in popularity due to the COVID-19 pandemic. Organizations quickly shifted to remote work and created gaps in their cyber defenses. Cybercriminals have exploited these vulnerabilities to deliver Ransomware. This has led to a surge in ransomware attacks. Ransomware attacks rose by 50% in Q3 2020 compared to the first six months of 2019.
Also Read- Best Antivirus Software For Windows 11
List of Ransomware Encrypted File Extensions 2022
| Ransomware File Extensions | File Extensions Description |
| file extension micro | TeslaCrypt 3.0 ransomware encrypted data |
| file extension zepto | Locky ransomware affected data |
| file extension cerber3 | Cerber 3 ransomware affected data |
| file extension locky | Locky ransomware affected data |
| file extension loli | LOLI RanSomeWare Ransomware affected file |
| file extension cerber | Cerber Ransomware affected data |
| file extension axx | AxCrypt encrypted data |
| file extension mole | CryptoMix (variant) ransomware affected data |
| file extension onion | Dharma ransomware affected data |
| file extension cryp1 | CryptXXX ransomware affected data |
| file extension crypt | Scatter ransomware affected data |
| file extension osiris | Locky (variant) ransomware affected data |
| file extension crypz | CryptXXX ransomware affected data |
| file extension ccc | TeslaCrypt or Cryptowall encrypted data |
| file extension locked | Various Ransomware affected data |
| file extension odin | Locky Ransomware affected file |
| file extension cerber2 | Cerber 2 ransomware affected file |
| file extension globe | Globe Ransomware affected file |
| file extension sage | Sage ransomware affected data |
| file extension encrypt | Alpha ransomware affected data |
| file extension exx | Alpha Crypt encrypted data |
| file extension pubg | PUBG ransomware affected data |
| file extension encrypted | Various Ransomware affected file |
| file extension good | Scatter ransomware affected data |
| file extension ezz | Alpha Crypt virus encrypted data |
| file extension r5a | 7ev3n Ransomware affected file |
| file extension 1txt | Enigma Ransomware affected file |
| file extension sexy | PayDay ransomware affected files |
| file extension enciphered | Malware (Ransomware) encoded data |
| file extension enigma | Coverton ransomware affected data |
| file extension MERRY | Merry X-Mas Ransomware affected file |
| file extension wallet | Globe 3 (variant) Ransomware affected file |
| file extension cryptowall | Encrypted file by Cryptowall ransomware |
| file extension ecc | Cryptolocker or TeslaCrypt virus encrypted file |
| file extension coded | Anubis Ransomware affected file |
| file extension decrypt2017 | Globe 3 ransomware affected file |
| file extension zzzzz | Locky Ransomware affected file |
| file extension cryptolocker | CryptoLocker encrypted file |
| file extension aesir | Locky Ransomware affected file |
| file extension fantom | Fantom ransomware affected data |
| file extension breaking_bad | Files1147@gmail(.)com ransomware affected data |
| file extension ha3 | El-Polocker affected file |
| file extension damage | Damage ransomware affected file |
| file extension wcry | WannaCry Ransomware affected file |
| file extension dharma | CrySiS Ransomware affected file |
| file extension lol! | GPCode ransomware affected data |
| file extension kratos | KratosCrypt ransomware affected data |
| file extension MRCR1 | Merry X-Mas Ransomware affected file |
| file extension legion | Legion ransomware affected data |
| file extension crjoker | CryptoJoker ransomware affected data |
| file extension maya | HiddenTear (variant) ransomware affected file |
| file extension rrk | Radamant v2 Ransomware affected file |
| file extension LeChiffre | LeChiffre Ransomware affected data |
| file extension keybtc@inbox_com | KeyBTC ransomware affected data |
| file extension serp | Serpent (variant) Ransomware affected file |
| file extension kraken | Rakhni Ransomware affected file |
| file extension windows10 | Shade ransomware affected data |
| file extension enc | TorrentLocker Ransomware affected file |
| file extension zcrypt | ZCRYPT ransomware affected data |
| file extension crinf | DecryptorMax or CryptInfinite ransomware affected data |
| file extension surprise | Surprise ransomware affected data |
| file extension ytbl | Troldesh (variant) Ransomware affected file |
| file extension file0locked | Evil Ransomware affected file |
| file extension mp3 | TeslaCrypt 3.0 ransomware encrypted data |
| file extension pdcr | PadCrypt Ransomware script |
| file extension venusf | Venus Locker Ransomware affected file |
| file extension dale | Chip ransomware affected file |
| file extension lesli | CryptoMix Ransomware affected file |
| file extension potato | Potato Ransomware affected file |
| file extension zzz | TeslaCrypt ransomware encrypted data |
| file extension angelamerkel | Angela Merkel Ransomware affected file |
| file extension PEGS1 | Merry X-Mas Ransomware affected file |
| file extension wflx | WildFire Ransomware affected file |
| file extension R16m01d05 | Ransomware affected data |
| file extension remk | STOP Ransomware variant |
| file extension serpent | Serpent ransomware affected file |
| file extension Dexter | Troldesh (variant) Ransomware affected file |
| file extension xyz | TeslaCrypt ransomware encrypted data |
| file extension rnsmwr | Gremit Ransomware affected file |
| file extension darkness | Rakhni ransomware affected data |
| file extension encr | FileLocker Ransomware affected file |
| file extension thor | Locky Ransomware affected file |
| file extension locklock | LockLock ransomware affected data |
| file extension nuclear55 | Nuke Ransomware affected file |
| file extension kernel_time | KeRanger OS X ransomware |
| file extension evillock | Evil-JS (variant) Ransomware affected file |
| file extension coverton | Coverton ransomware affected data |
| file extension rekt | HiddenTear (variant) ransomware affected file |
| file extension 1cbu1 | Princess Locker Ransomware affected file |
| file extension purge | Globe Ransomware affected file |
| file extension VforVendetta | Samsam (variant) Ransomware affected file |
| file extension cry | CryLocker ransomware affected data |
| file extension zyklon | ZYKLON ransomware affected data |
| file extension dCrypt | DummyLocker Ransomware affected file |
| file extension derp | Derp ransomware renamed file |
| file extension raid10 | Globe [variant] Ransomware affected file |
| file extension zorro | Zorro Ransomware affected file |
| file extension xxx | TeslaCrypt 3.0 ransomware encrypted file |
| file extension bin | Alpha/Alfa ransomware affected data |
| file extension AngleWare | HiddenTear/MafiaWare (variant) ransomware affected file |
| file extension shit | Locky Ransomware affected file |
| file extension btc | Jigsaw Ransomware affected data |
| file extension EnCiPhErEd | Xorist Ransomware affected data |
| file extension fucked | Manifestus Ransomware affected file |
| file extension atlas | Atlas ransomware affected file |
| file extension exotic | Exotic Ransomware affected file |
| file extension realfs0ciety@sigaint.org.fs0ciety | Fsociety Ransomware affected file |
| file extension vbransom | VBRansom 7 ransomware affected file |
| file extension crypted | Nemucod Ransomware affected file |
| file extension padcrypt | PadCrypt Ransomware affected data |
| file extension dll | FSociety Ransomware affected file |
| file extension vvv | TeslaCrypt 3.0 ransomware encrypted data |
| file extension cryeye | DoubleLocker ransomware affected data |
| file extension hush | Jigsaw Ransomware affected file |
| file extension unavailable | Al-Namrood Ransomware affected file |
| file extension enc | Cryptorium Ransomware affected file |
| file extension paym | Jigsaw Ransomware affected data |
| file extension RMCM1 | Merry X-Mas Ransomware affected file |
| file extension ttt | TeslaCrypt 3.0 ransomware encrypted data |
| file extension reco | STOP/DJVU ransomware file |
| file extension stn | Satan Ransomware affected file |
| file extension spora | Spora Ransomware affected file |
| file extension aaa | TeslaCrypt ransomware encrypted data |
| file extension abc | TeslaCrypt ransomware encrypted data |
| file extension crptrgr | CryptoRoger ransomware affected data |
| file extension braincrypt | Braincrypt Ransomware affected file |
| file extension encrypted | Donald Trump Ransomware affected file |
| file extension _AiraCropEncrypted | AiraCrop Ransomware affecte file |
| file extension 73i87A | Xorist Ransomware affected data |
| file extension ruby | Ruby Ransomware affected file |
| file extension crypte | Jigsaw (variant) Ransomware affected file |
| file extension xxx | help_dcfile Ransomware affected file |
| file extension pzdc | Scatter ransomware affected data |
| file extension fun | Jigsaw Ransomware affected data |
| file extension alcatraz | Alcatraz Locker Ransomware affected file |
| file extension crab | GandCrab ransomware affected data |
| file extension RARE1 | Merry X-Mas Ransomware affected file |
| file extension rekt | RektLocker ransomware affected data |
| file extension odcodc | ODCODC Ransomware affected file |
| file extension herbst | Herbst ransomware affacted data |
| file extension szf | SZFLocker ransomware affected data |
| file extension pays | Jigsaw Ransomware affected data |
| file extension rip | KillLocker Ransomware affected file |
| file extension CCCRRRPPP | Unlock92 Ransomware affected data |
| file extension comrade | Comrade Ransomware affected file |
| file extension antihacker2017 | Xorist (variant) Ransomware affected file |
| file extension rdm | Radamant Ransomware affected file |
| file extension helpmeencedfiles | Samas/SamSam Ransomware affected file |
| file extension covid-19 | Phishing / ransomware file |
| file extension magic | Magic Ransomware affected data |
| file extension SecureCrypted | Apocalypse Ransomware affected file |
| file extension powerfulldecrypt | Samas/SamSam Ransomware affected file |
| file extension hnumkhotep | Globe 3 ransomware affected file |
| file extension bitstak | Bitstak Ransomware affected data |
| file extension p5tkjw | Xorist Ransomware affected data |
| file extension bript | BadEncriptor Ransomware affected file |
| file extension BarRax | BarRax (HiddenTear variant) ransomware affected file |
| file extension kkk | Jigsaw Ransomware affected data |
| file extension a5zfn | Alma Locker ransomware affected data |
| file extension noproblemwedecfiles | Samas/SamSam Ransomware affected file |
| file extension kyra | Globe Ransomware affected file |
| file extension covid19 | Phishing / ransomware file |
| file extension perl | Bart Ransomware affected file |
| file extension vindows | Vindows Locker Ransomware affected file |
| file extension lovewindows | Globe (variant) Ransomware affected file |
| file extension madebyadam | Roga Ransomware affected file |
| file extension wncry | Wana Decrypt0r 2.0 ransomware affected data |
| file extension kernel_complete | KeRanger OS X ransomware data |
| file extension PoAr2w | Xorist Ransomware affected file |
| file extension paymst | Jigsaw Ransomware affected file |
| file extension payms | Jigsaw Ransomware affected file |
| file extension ifuckedyou | SerbRansom Ransomware affected file |
| file extension grt | Karmen HiddenTear (variant) Ransomware affected file |
| file extension conficker | Conficker Ransomware affected file |
| file extension paymts | Jigsaw Ransomware affected file |
| file extension info | PizzaCrypts Ransomware affected data |
| file extension payrms | Jigsaw Ransomware affected file |
| file extension lcked | Jigsaw (variant) Ransomware affected file |
| file extension d4nk | PyL33T Ransomware affected file |
| file extension czvxce | Coverton Ransomware affected file |
| file extension kernel_pid | KeRanger OS X ransomware data |
| file extension kostya | Kostya Ransomware affected file |
| file extension adk | Angry Duck ransomware affected file |
| file extension encrypted | KeRanger OS X Ransomware affected file |
| file extension Whereisyourfiles | Samas/SamSam Ransomware affected file |
| file extension theworldisyours | Samas/SamSam Ransomware affected file |
| file extension oops | Marlboro Ransomware affected file |
| file extension edgel | EdgeLocker Ransomware affected file |
| file extension krab | GandCrab v4 ransomware affected data |
| file extension kimcilware | KimcilWare Ransomware affected data |
| file extension gefickt | Jigsaw (variant) Ransomware affected file |
| file extension rokku | Rokku ransomware affected data |
| file extension fun | Jigsaw (variant) Ransomware affected file |
| file extension paymrss | Jigsaw Ransomware affected file |
| file extension razy | Razy Ransomware affected data |
| file extension dxxd | DXXD Ransomware affected file |
| file extension lock93 | Lock93 Ransomware affected file |
| file extension vxlock | vxLock Ransomware affected file |
| file extension pec | PEC 2017 ransomware affected file |
| file extension rmd | Zeta Ransomware affected file |
The above table includes the most commonly ransomware encrypted file types. This Ransomware Encrypted File Extensions List will assist you in identifying the Ransomware name. I hope you found this article helpful. Please share this article with your friends.