Bbnm Ransomware

The STOP/Djvu Ransomware family is still being used extensively by cybercriminal groups to create new destructive malware variants. One such example is the Bbnm Ransomware threat. It is another variant of the STOP/Djvu Ransomware with few distinguishing characteristics, but its potential to cause damage is significant. Once a system is infected by Bbnm, it will be subjected to data encryption that will affect most of the files stored on it.

The locked files will no longer be accessible. Users also will also notice that each encrypted file now has '.bbnm' appended to its original name as a new extension. Another change made by the malware is the appearance of a new text file named '_readme.txt.' The role of this file is to deliver the ransom note of the attackers containing instructions for their victims.

Ransom Note's Overview

Reading through the note reveals that the sum that the cybercriminals attempt to extort from the affected users as ransom is $980. However, if users establish communication with the hackers during the first 72 hours of the attack, they will supposedly receive preferential pricing, which will be 50% lower. Victims also can send a single locked file to be decrypted for free as a demonstration that the hackers are actually capable of restoring the encrypted data. The note contains two email addresses that act as communication channels. The main one is 'manager@time2mail.ch,' while 'supportsys@airmail.cc' is described as a reserve address.

The full set of instructions left by Bbnm Ransomware:

'ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-6Ti2DxXR3I
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
manager@time2mail.ch

Reserve e-mail address to contact us:
supportsys@airmail.cc

Your personal ID:'