Some malicious actors use the "Softcobra" brand to lure victims into running an executable that encrypts their hard drive. The ransom note ironically demands Bitcoin to "decode your files."

“Your files are encrypted! Send 0.5 BTC to [Bitcoin Address] to resolve the problem. Do not modify encrypted files or the process will be irreversible.”

If you search for "softcobra decode full download" on Google or torrent sites, you enter a minefield. Cybersecurity firms (Kaspersky, Malwarebytes, Bitdefender) have published reports noting that of files labeled "Softcobra" are genuine cracks. The other 80% are: