CHIP

The ransomware is distributed by the Empire Pack exploit kit and encrypts files with RSA encryption. After a successful infiltration, CHIP encrypts various files and adds the extension ".CHIP". For example, "sample.jpg" is renamed to "sample.jpg.CHIP". After a successful encryption, CHIP creates a text file ("CHIP_FILES.txt") and places it in each folder containing the encrypted files.