A BIP file is a file encrypted by a virus variant of Dharma ransomware utilized by cybercriminals. It contains a file, such as a .JPG or .MP3 file, encrypted with Advanced Encryption Standard (AES) encryption by the virus. BIP files are similar to .WALLET files but became prevalent in May 2018.

The purpose of Dharma ransomware is to take your files hostage and force you to pay the perpetrator, typically through bitcoin, to unlock your files. Once the virus infiltrates your computer, often via email attachment from an unknown sender, it begins scrambling your files, renaming them, and encrypting them. The virus then generates a .TXT ransom note (FILES ENCRYPTED.txt) informing you of the takeover and what you need to do to recover your files. The virus renames your files using the following naming convention: [filename].id-[ID].[email@email.com].bip For example, if you have a sample.xlsx file it becomes sample.xlsx.id-HDNFH438.webmafia@asia.com.bip file. NOTE: There is no program currently available to effectively restore your files. If you back up your files you can execute a full system restore.