Johnquickhelper Ransomware
Johnquickhelper is a disruptive ransomware threat that cybercriminals deploy to lock users out of their own files. The goal of the attackers is to then use the encrypted information and extort the victim for money. Without having a sufficiently protected backup of the data, affected users are left with few options when it comes to restoring their precious personal or important work-related files.
During its intrusive actions, the Johnquickhelper Ransomware will append a new file extension to the original names of all locked files. Unlike the vast majority of ransomware threats who use the same extension for all encrypted files, Johnquickhelper appends a different four-character string to each filename. Victims also will notice that a new file named 'readt_it.txt' has been created and that the default desktop wallpaper of the system has now been changed.
Ransom Note's Overview
The instructions left by the attackers can be found inside the text file. The ransom-demanding message there reveals that the hackers demand to be paid a ransom of $750. In exchange, they are supposed to provide victims with a decryptor software that should be able to decrypt all locked files. To put additional pressure on their victims, the cybercriminals warn that after 78 hours have passed since the ransomware attack, they will increase the size of the demanded ransom to $1300. The note also contains a single email address - 'johnquickhelper@protonmail.com,' that can be used to contact the hackers.
The full message delivered by Johnquickhelper Ransomware is:
'ATTENTION!
Don't worry, you can return all your files!
All of your files have been encrypted
Your computer was infected with a ransomware virus. Your files have been encrypted and you won't
be able to decrypt them without our help.What can I do to get my files back?You can buy our special
decryption software, this software will allow you to recover all of your data and remove the
ransomware from your computer.The price for the software is $750 If paid before 78hours otherwise it will be $1300.contact us:
johnquickhelper@protonmail.comYour personal ID:'
