Short Bio

Cerber is ransomware-as-a-service (RaaS) where affiliates spread the malware and pay a commission to its developers. It uses strong encryption, and there are no free decryptors available. For more technical details, read our blog post, Cerber ransomware – new, but mature.

Common infection method

As mentioned earlier, affiliates are responsible for spreading this ransomware, so there are different methods in use. But exploit kits and email are the most common ones.


Malwarebytes can remove Ransom.Cerber without further user interaction, but it cannot decrypt files that were encrypted.