Sage ransomware encrypts files on your computer. It adds a string of unique characters to the extension of the encrypted files. For example, image.jpg becomes image.jpg.SAGE. Sage places a special tex...
Sage ransomware encrypts files on your computer. It adds a string of unique characters to the extension of the encrypted files. For example, image.jpg becomes image.jpg.SAGE. Sage places a special text file into every folder containing the encrypted data. The text file requests the ransom. Regretfully, it is not possible to recover the Sage encrypted files without the intervention of the ransomware developers. Sage is distributed via spam emails containing a ZIP attachment. This attachment contains another ZIP file with a JS, DOC or DOCX file. If you open and run the script or macro in these files, Sage infects your computer. Sage deletes the user’s Windows Shadow Volume Copies to prevent recovering files. It also adds the ransom note’s text to the Windows desktop background. We never suggest paying the ransom as the criminals likely won’t decrypt your files.
SageMath
Jupyter Notebook