KeyPass Ransomware Distribution Campaign Found Targeting At Least 20 Countries

Last updated June 23, 2021
Written by:
Nitish Singh
Image Courtesy of WCCFTech

A variant of a STOP ransomware has been identified by multiple security firms, which is being distributed in at least 20 countries. With multiple sources being cited by victims, the scale of the KeyPass malware distribution campaign is unknown. According to statistics posted by ID Ransomware, a noticeable spurt in ransomware has been seen since August 8th with submissions from all around the globe.

To avoid any confusion, even though the name of the ransomware sounds similar to KeePass, the Keypass malware has nothing to do with the password management software. Whenever a user is affected by the ransomware, files on their system get encrypted and have a .KEYPASS extension added at the end of all files. A ransom note file is made which offers instructions on how to recover your files along with payment instructions. If you are affected, contact law enforcement instead of communicating with the attackers to seek assistance.

KeyPass Ransom Note

Image Courtesy of Bleepstatic

To avoid the risk of having your files encrypted it is recommended to backup all of your system files. There are many backup utilities available which can transfer copies of your important files to a separate storage device or on the cloud. You should also not have any remote desktop services connected to the internet, and it is recommended to use a VPN to avoid ransomware attacks like KeyPass.

If you do not have a good anti-malware program, it is recommended to invest in professional software to keep yourself safe. Do not download pirated software or open attachments without scanning them as added measures of protection. It is also recommended to update your OS and software regularly to ensure software vulnerability patches are delivered on time.

What do you think about the KeyPass ransomware? Let us know in the comments below. Also, to get instant tech updates, follow TechNadu’s Facebook page, and Twitter handle.



For a better user experience we recommend using a more modern browser. We support the latest version of the following browsers: For a better user experience we recommend using the latest version of the following browsers: