Ekvf Ransomware
The infamous STOP/Djvu Ransomware family has remained a popular choice among cybercriminals with new variants being detected by the infosec community almost daily. The newest threat classified as part of the Stop/Djvu Ransomware family is named Ekvf Ransomware. Without displaying any meaningful deviation or improvements, the Ekvf Ransomware is nonetheless a threat that can cut users off from accessing their files completely. Upon a successful infiltration of the user's computer, the threat will initiate an encryption routine that will affect all of the most popular filetypes. The only exceptions are vital system files that if tampered with could render the whole system becoming unstable.
Each file encrypted by the Ekvf Ransomware will have '.ekvf' appended to its name as a new extension. As for the ransom note carrying the instruction of the hackers responsible for unleashing the threat, it will be dropped onto the compromised device in the form of text files named '_readme.txt.' These files will be placed inside every folder that contains encrypted data.
According to the instructions, the hackers want to receive the sum of $980, after which they promise to provide their victims with the decryption key and software tool required for the decryption of the files. To make the deal a bit more palatable, the criminals even offer to slash the price in half to $490, if the affected user establishes communication in the first 72 hours following the ransomware infection. For that purpose, two email addresses are provided in the note - 'helpteam@mail.ch' and 'helpmanager@airmail.cc.' A single file can be attached to the email message to be decrypted for free.
The full text of Ekvf Ransomware's note is:
'ATTENTION!
Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-WctYmhDIkl
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.
To get this software you need write on our e-mail:
helpteam@mail.ch
Reserve e-mail address to contact us:
helpmanager@airmail.cc
Your personal ID:'
