Threat Database Ransomware Daz Ransomware

Daz Ransomware

The Daz Ransomware is a threatening variant of the VoidCrypt Ransomware. Although the threat doesn't differ too much from all other VoidCrypt variants, it has retained the malware family's capacity to disrupt the infected systems. Indeed, after being activated on the breached device, the Daz Ransomware will target various, different file types and lock them via uncrackable encryption. Victims will not be able to even access most of their documents, images, photos, archives, databases, etc.

An additional change to the affected files could be found in their names. As part of its actions, the Daz Ransomware will append an ID string, an email address, and a new extension to the original name of each locked file. The ID string is generated for each specific victim, while the email ('Sc0rpio0@tutanota.com') and the file extension ('.Daz') remain consistent. The threat also will drop a text file named 'unlock-info.txt' on the desktop of the breached systems.

When victims open the file, they will find a ransom note with instructions. According to the delivered message, the exact sum that the attackers want to receive as a ransom will depend on the time it takes each victim to establish communication with them. The note mentions a secondary email address at 'Sc0rpio@cock.li.' It also clarifies that the attackers will only accept payments made using the Bitcoin cryptocurrency. A single encrypted file that doesn't contain any important data and is less than 1MB in size could be sent for free decryption.

The entire set of instructions dropped by Daz Ransomware is:

'All your files have been encrypted!

All your files have been encrypted due to a security problem with your PC. If you want to restore them, write us to the e-mail; Sc0rpio0@tutanota.com

Write this ID in the title of your message : -

In case of no answer in 24 hours write us to theese e-mails: Sc0rpio@cock.li

You have to pay for decryption in Bitcoins. The price depends on how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files.

Free decryption as guarantee

Before paying you can send us up to 1 file for free decryption. The total size of files must be less than 1Mb (non archived), and files should not contain valuable information. (databases,backups, large excel sheets, etc.)

How to obtain Bitcoins

The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price.

hxxps://localbitcoins.com/buy_bitcoins

Also you can find other places to buy Bitcoins and beginners guide here:

hxxp://www.coindesk.com/information/how-can-i-buy-bitcoins/

Attention!

Do not rename encrypted files.

Do not try to decrypt your data using third party software, it may cause permanent data loss.

Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.'

Related Posts

Trending

Most Viewed

Loading...