Gcyi Ransomware

Part of the STOP/Djvu family of threats, Gcyi Ransomware's main goal is to infiltrate the computers of its victims and encrypt the data stored there. Although, as a variant, it is almost completely identical to the rest of the STOP/Djvu threats, Gcyi's encryption process is strong enough to render all affected data unusable and inaccessible.

One of the characteristics that separate this particular piece of malware from the rest of the threats, is the unique file extensions it employs. Indeed. All encrypted files will have their original names modified to now include '.gcyi' as a file extension. One of the final steps of the threat involves delivering a ransom note with instructions for its victims. This message will be dropped to the breached systems as a text file named '_readme.txt.'

Ransom Note's Overview

The threat's ransom-demanding message follows the established STOP/Djvu pattern. It mentions that the ransom victims are told to pay is set at $980. However, that initial amount can be brought down by 50% if the affected users reach out and contact the hackers within 72 hours of the Gcyi Ransomware attack. Two email addresses are provided in the note - 'support@sysmail.ch' and 'helprestoremanager@airmail.cc.' Victims also are told that, as part of their messages, they can attach a single locked file that Gcyi Ransomware's operators will supposedly decrypt for free.

The entire set of instructions left by the threat is:

'ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-XG8CpMbJwj
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
support@sysmail.ch

Reserve e-mail address to contact us:
helprestoremanager@airmail.cc

Your personal ID:'