Hhwq Ransomware

The STOP/Djvu malware family remains a popular choice among cybercriminals. As a result, more and more variants belonging to this family are being created and used in attacks again computer users. One example is the Hhwq Ransomware threat. Despite being yet another variant, its destructive capabilities make it a potent threat that can lock users out of accessing their own files. Documents, pictures, photos, PDFs, archives, databases, etc. will all be encrypted and left in an unusable state. Without the proper decryption keys, victims have almost no way to restore their data.

What sets this variant apart from other STOP/Djvu threats is the file extension it uses to mark the encrypted files. Users will notice that nearly all of the files stored on the breached systems now carry '.hhwq' as a new file extension. The threat also will generate a text file named '_readme.txt.'

According to the ransom note found inside it, the hackers demand to be paid a ransom of $980. However, if users contact them within 72 hours, the price will supposedly be cut in half to $490. Users are also offered the chance to send one locked file to be decrypted for free. They can do so by messaging the 'restorealldata@firemail.cc' and 'gorentos@bitmessage.ch' email addresses or the '@datarestore' Telegram account. Victims of a ransomware attack should remember that communicating with cybercriminals is strongly discouraged as doing so could expose them to a plethora of additional privacy and security risks.

The full text of Hhwq Ransomware's message is:

'ATTENTION!

Don't worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-WbgTMF1Jmw
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
restorealldata@firemail.cc

Reserve e-mail address to contact us:
gorentos@bitmessage.ch

Our Telegram account:
@datarestore

Your personal ID:'