Buran

Buran is a high-risk ransomware distributed using Rig Exploit Kit. It is a new variant of another ransomware infection called Vega. After successfully infiltrating the system, Buran encrypts most of the stored files and adds the victim's unique ID to the file names (for example, "sample.jpg" could be renamed to a file name such as "sample.jpg.48E7EE9F-3B50-B177-0614-DF09178EE722"). After a successful encryption, Buran generates a text file ("!!! YOUR FILES ARE ENCRYPTED !!!.TXT") and stores it on the desktop. The file contains a ransomware message.