Bbii Ransomware

The Bbii Ransomware is a threat that can be used to lock numerous file types. The utilized encryption algorithm is strong enough to make the restoration of the impacted files without the correct decryption key practically impossible. As is typically the case when it comes to ransomware threats, the operators of the Bbii Ransomware offer to send the necessary keys to their victims, but only after being paid a hefty ransom.

Analysis of the threat has revealed that it belongs to a rather popular family among cybercriminals, the STOP/Djvu malware family. Indeed, the Bbii Ransomware follows closely the behavior observed in other variants of the family. All of the affected files will be marked via the addition of a new file extension to their names. In this case, users will notice that their documents, PDFs, archives, databases, and other file types, now have '.bbii' added to their names. In addition, a text file named '_readme.txt' will be created on the infected systems. The file contains a ransom note listing the demands of the attackers.

Ransom Note's Overview

The text of the note left by the Bbii Ransomware matches the messages found in other STOP/Djvu attacks. The threat actors demand to be paid a ransom of $980 but offer to reduce the price in half for any victims that contact them within the first 72 hours. The cybercriminals also state that they are willing to demonstrate their ability to restore the encrypted data. That is why users are given the chance to send a single locked file to be decrypted for free. However, the chosen file must not contain any important data. Two email addresses are mentioned as potential communication channels - 'support@bestyourmail.ch' and 'supportsys@airmail.cc.'

The full text of Bbii Ransomware's note is:

'ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-KXqYlvxcUy
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
support@bestyourmail.ch

Reserve e-mail address to contact us:
supportsys@airmail.cc

Your personal ID:'