Kqgs Ransomware

Tracked as the Kqgs Ransomware by cybersecurity experts, this threat is another destructive variant belonging to the STOP/Djvu family that has been unleashed in the wild and is capable of locking users out from accessing their own private or work-related files. Indeed, nearly all of the documents, PDFs, photos, images, archives, databases, audio and video files, stored on the compromised devices will be encrypted and rendered unusable completely. The hackers will then demand to be paid a hefty ransom if they are to assist the victims in restoring the encrypted data.

The signature signing that Kqgs Ransomware is responsible for the attack on the targeted devices is the extension it uses to mark all locked files. As part of its encryption process, the threat will append '.kqgs'to the names of all affected file types. In addition, when all targeted files have been processed, the Kqgs Ransomware will create a text file named '_readme.txt' on the victim's device. Inside this file will be a ransom note detailing the demands of the attackers.

Ransom Note's Details

According to the message left by the Kqgs Ransomware, its operators demand to receive a ransom of $980 exactly. However, there is an option to reduce that price by 50% and bring the ransom down to $490. The only requirement mentioned in the note is for the victims of the threat to contact the attackers at any point during the first 72 hours following the malware attack.

Affected users can do so by sending an email to the two addresses found within the note. The main email is 'support@sysmail.ch,' while 'helprestoremanager@airmail.cc' is described as a reserve address. As part of their message, Kqgs Ransomware's victims can attach one encrypted file that the hackers promise to unlock and send back for free.

The entire note left by Kqgs Ransomware is:

'ATTENTION!

Don’t worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-bPgv29RUmq
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that’s price for you is $490.
Please note that you’ll never restore your data without payment.
Check your e-mail “Spam” or “Junk” folder if you don’t get answer more than 6 hours.

To get this software you need write on our e-mail:
support@sysmail.ch

Reserve e-mail address to contact us:
helprestoremanager@airmail.cc'