Windows and Android Among Us players can access the game’s AMOGUS files. The files store player settings and game settings. Players should change settings in-game. Windows files are in AppData/LocalLow/Innersloth/Among Us.
Amogus ransomware encrypts files. It adds the “.amogus” extension to encrypted files. For example, “myphoto.jpg” becomes “myphoto.jpg.amogus”. Amogus places a text file in every folder with encrypted data.
Amogus scans for images, videos, documents. It encrypts them. It asks for Bitcoin to decrypt. Amogus updates the modified date when encrypting.
Amogus changes the file extension after encrypting. The new extension can be “.amogus”. Amogus puts a decrypt text file on the desktop. Files can’t be recovered without Amogus developers.
Amogus spreads via Trojan Droppers, Emails, Exploits.
Amogus encoding gets 8 bits from each byte. It makes strings for them. It adds random colors and “SUS” or “SAFE”. Each bit separated by “;”. Encoding recoverable if characters fail.
Among Us