BitKangoroo targets Windows OS and the distribution method is unknown as this variant is currently in development. It encrypts files using AES-256 and appends .bitkangoroo to encrypted file names. Once the encryption process is complete, BitKangoroo displays a ransom screen that features a countdown clock and, for every hour that passes prior to the ransom being paid, BitKangoroo will deletes one encrypted file. According to researchers, if the victim enters the wrong decryption key, BitKangoroo will delete all of the victim's encrypted files.

  • Bleeping Computer provides more information about BitKangoroo here.
  • Bleeping Computer provides a free decryption tool for BitKangoroo, here.

Image Source: Bleeping Computer