Threat Database Ransomware Palq Ransomware

Palq Ransomware

Cybercriminals are continuing to churn out more and more ransomware threats based on the STOP/Djvu family. One of the latest to be detected by the infosec community is the Palq Ransomware. The Palq Ransomware follows the standard behavior of a STOP/Djvu variant without showing any meaningful improvements.

Users should not underestimate the threat. Palq can cause massive damage to the computers it infects by initiating an encryption process with a strong locking algorithm. In the aftermath of the attack, victims will no longer be able to access the majority of the files stored on the compromised device.

Each locked file that matches the file types targeted by the threat will have '.palq' appended to its original name. When all matching files have been locked, the malware will proceed to deliver its ransom note with instructions for the victims. The ransom-demanding message is delivered to the systems as a text file named '_readme.txt.'

Palq Ransomware's Demands

The ransom note is identical to the messages of all the other STOP/Djvu variants. The hackers try to extort their victims for money by promising them to send the required decryption key and software tool in exchange. The sum of the ransom is exactly $980, but affected users could try to decrease it by 50% down to $490. Apparently, the only requirement is to establish contact with the attackers during the first 72 hours.

The hackers also mention that a single encrypted file can be sent to be decrypted for free. However, the chosen file must not contain any important data. As per usual, two email addresses are given to the victims as communication channels - 'manager@mailtemp.ch' and 'helpmanager@airmail.cc.'

The ransom note of the Palq Ransomware is:

'ATTENTION!

Don’t worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-fhnNOAYC8Z
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that’s price for you is $490.
Please note that you’ll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don’t get answer more than 6 hours.

To get this software you need write on our e-mail:
manager@mailtemp.ch

Reserve e-mail address to contact us:
helpmanager@airmail.cc
'

Trending

Most Viewed

Loading...