Merry X-mas.rar < iPhone Deluxe >

It scans local drives and encrypts hundreds of file types using a custom cipher.

Victims are lured into clicking links that download a ZIP or RAR archive (like Merry X-Mas.rar ). Inside is often a malicious executable (e.g., COMPLAINT.pdf.exe ) or a Word document with a malicious macro. 2. Execution & Technical Behavior Merry X-Mas.rar

The malware typically spreads through campaigns designed to exploit holiday-themed or administrative urgency: It scans local drives and encrypts hundreds of

Some variants drop the DiamondFox malware, an infostealer capable of harvesting passwords, credit card data, and turning the PC into a DDoS bot. 3. Symptoms of Infection Merry X-Mas Ransomware Decryption Tool - Check Point Blog Symptoms of Infection Merry X-Mas Ransomware Decryption Tool

Upon execution, the ransomware performs the following actions:

Emails disguised as court attendance notifications.

The file is a malicious archive associated with the Merry Christmas (or Merry X-Mas) ransomware, a threat first identified in early January 2017. Malware Profile: Merry X-Mas Ransomware First Spotted: January 3, 2017. Target OS: Windows. Developer Alias: "ComodoSecurity".