Unknown Threat Actor Uses Chaos Ransomware Variant Yashma To Target English Speaking Countries In Addition To Bulgaria, China and Vietnam

Make sure you quarantine the malware from your system first.

We strongly suggest that all user accounts with remote login permissions change their passwords and look for other local accounts that ransomware operators may have added Yashma ransomware must be removed from the operating system to prevent further encryption. Unfortunately, uninstalling will not restore already infected files. The only solution is to recover them from a backup (if any).

We also recommend that you keep backups in multiple different locations (e.g. remote servers, unplugged storage devices, etc.) to ensure data security.