Bpsm Ransomware

The Bpsm malware threat poses a severe danger to the data stored on the device it manages to infect. The threat is classified as ransomware, which means that it possesses a strong encryption routine that will prevent victims from recovering their documents, photos, projects, databases, PDFs, etc., without knowing the correct decryption key. Typically, the attackers state that they are willing to send this key but only after the victims have paid them a hefty ransom.

A crucial detail is that the Bpsm Ransomware is a variant belonging to the notorious STOP/Djvu malware family. In 2022, the operators of STOP/Djvu threats started deploying additional threatening tools alongside the ransomware variants. Cybersecurity researchers have observed the presence of powerful stealers, such as Vidar or RedLine.

Infection Details

When the Bpsm Ransomware is activated on the device, it will impact a vast portion of the files and data found there. Each locked file will be marked with '.bpsm' appended to its name and placed as a new extension. Victims also will find a new text file named '_readme.txt' on the system. The file carried a ransom note with instructions that were supposed to tell affected users how to proceed to contact the hackers and pay the demanded ransom.

The specific information tells victims that they are expected to transmit $980 to the threat actors. Victims who reach them out during the 72 hours after the attack apparently have to pay only half of the initial amount. Two emails are mentioned as potential communication channels - 'support@freshmail.top' and 'datarestorehelp@airmail.cc.' As part of their message, victims can send one encrypted file that the attackers 'promise' to unlock for free.

The full text of Bpsm Ransomware's note is as follows:

'ATTENTION!
Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-rmxjMZAZBJ
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
support@freshmail.top
Reserve e-mail address to contact us:
datarestorehelp@airmail.cc
Your personal ID:'