Ccza Ransomware
Cybercriminals are making more variants from various families and using them in threatening ransomware operations. One such example is the Ccza Ransomware threat, which is another version of the STOP/Djvu Ransomware that is capable of encrypting numerous file types. Victims will suddenly find themselves unable to access any of their documents, pictures, photos, PDFs, archives, databases and more. Typically, the attackers will leverage the locked files to extort affected individual users or corporate entities for money.
As part of its actions, Ccza will perform other intrusive changes to the breached systems. The threat will append '.ccza' to the names of the encrypted files as a new extension. In addition, a text file named '_readme.txt' will be created, usually on the desktop of the device. Inside the file, victims will find a ransom note detailing the instructions of the attackers.
According to the threat's ransom-demanding message, affected users will have to pay the sum of $980 to the threat actors. In exchange, the cybercriminals 'promise' to send back a decryptor tool and the necessary decryption keys. However, if the victims establish contact within 72 hours, the initial size of the ransom will supposedly be decreased by 50% to $490. Two email addresses are left in the note as a way to reach the hackers - 'support@bestyourmail.ch' and 'datarestorehelp@airmail.cc.' Anyone impacted by ransomware should be careful when trying to communicate with cybercriminals as doing so could expose them to unnecessary security or privacy risks.
The full text of the ransom note is:
'ATTENTION!
Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-HZpuxNJt6L
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.
To get this software you need write on our e-mail:
support@bestyourmail.ch
Reserve e-mail address to contact us:
datarestorehelp@airmail.cc
Your personal ID:'
