FATP Ransomware

The FATP Ransomware is a hurtful threat that can impact a large number of file types and leave them in an unusable state. Ransomware threats are typically used in financially-motivated attack operations, where cybercriminals try to extort their victims for money. The strong encryption algorithm used by ransomware threats ensures that the recovery of the locked files will be practically impossible without the proper decryption keys.

Infosec experts have found enough similarities to conclude that the FATP Ransomware is a variant of the infamous STOP/Djvu malware family. Indeed, the threat follows the typical steps observed as part of the behavior of this threatening family. First, the FATP Ransomware will mark all locked files by appending a 4-character extension - '.fatp' in this case, as a new file extension. Then, a ransom note will be delivered to the infected device as a text file named '_readme.txt.'

The instructions in the ransom-demanding message state that victims who wish to receive a decryptor tool and decryption keys from the attackers must pay them a ransom of $980. This initial amount can supposedly be reduced by 50% if the affected users or organizations contact the attackers within the first 72 hours. The two emails that can potentially be used as communication channels are 'support@fishmail.top' and 'datarestorehelp@airmail.cc.'

The full text of the ransom note is:

'ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-4wOUlYSwGo
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
support@fishmail.top

Reserve e-mail address to contact us:
datarestorehelp@airmail.cc

Your personal ID:'

FATP Ransomware Video

Tip: Turn your sound ON and watch the video in Full Screen mode.