Cadq Ransomware
The Cadq Ransomware is one of the latest variants stemming from the popularity among cybercriminals STOP/Djvu malware family. The threat has been discovered in the wild and although it doesn't display any significant deviations from the standard STOP/Djvu Ransomware behavior, it is still capable of crippling any infected computer severely. The Cadq Ransomware will lock nearly all of the files stored on the device with an uncrackable encryption algorithm. Users will find themselves unable to access files that were working fine just moments ago.
Whenever the Cadq Ransomware encrypts a file it also will change that file's original name by appending '.cadq' to it as a new extension. After completion of the encryption process, a ransom note will be dropped. The instructions from the criminals will be contained inside text files named '_readme.txt.'
According to the text of the note, the Cadq Ransomware targets important user files, such as pictures, databases, documents, etc. To recover their data, users are expected to pay a ransom of $980 to the hackers. The amount of the ransom will be slashed in half to $490 if the victims of the threat initiate communication with the hackers within the first 72 hours after the Cadq infection. For that purpose, the cybercriminals provide two different email addresses - 'helpmanager@airmail.cc' and 'helpteam@mail.ch.' They also allow their victims to attach a single file that will be decrypted for free.
The full set of instructions left by the Cadq Ransomware is:
'ATTENTION!
Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-9tWwjPzDLY
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.
To get this software you need write on our e-mail:
helpteam@mail.ch
Reserve e-mail address to contact us:
helpmanager@airmail.cc
Your personal ID:'
