Ccyu Ransomware

The Ccyu Ransomware is a distressing threat, designed to lock the data of its victims. This malware type can typically affect a wide range of files, including documents, images, photos, archives, PDFs, databases, audio and video files and more. The attackers will attempt to use the encrypted files as leverage to extort their victims for money. Although analysis of the Ccyu Ransomware has confirmed that the threat is a variant from the STOP/Djvu family, this fact doesn't diminish the potential damage that it can cause.

Affected users will notice that nearly all of their files now have '.ccyu' added to their names as a new extension. Another change brought by the threat is going to be the appearance of an unfamiliar text file named '_readme.txt.' Inside this file, victims will find a lengthy ransom note, detailing the instructions of the attackers.

The ransom-demanding message states that the operators of the Ccyu Ransomware want to receive a ransom of $980. However, the initial ransom amount could potentially be reduced by 50% down to $490, if victims contact the hackers within the first 72 hours of the malware infection. Two email addresses can be found in the note and used as potential communication channels - 'support@bestyourmail.ch' and 'datarestorehelp@airmail.cc.' As part of their message, users can attach a single locked file to be decrypted for free.

Of course, trusting the words of cybercriminals is not recommended. The hackers may simply take the money and run or send back a malfunctioning decryptor tool that will not be able to restore all of the encrypted files. Not to mention that during the communication with the threat actors, users may be unwillingly exposing themselves to more privacy and security risks.

The full text of the ransom note left by Ccyu Ransomware is:

'ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-HZpuxNJt6L
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
support@bestyourmail.ch

Reserve e-mail address to contact us:
datarestorehelp@airmail.cc

Your personal ID:'