Threat Database Ransomware Qqlo Ransomware

Qqlo Ransomware

The Qqlo Ransomware is a variant from the still popular among cybercriminals STOP/Djvu malware family. The STOP/Djvu Ransomware strain has been used for the creation of numerous, threatening variants that although barely distinguishable from each other, are still capable of causing significant damage to the infected devices. Qqlo is not an exception. Affected systems will be subjected to data encryption that will leave documents, PDFs, photos, archives, databases, and many other file types stored on them in an unusable and inaccessible state.

Victims will notice that nearly all of their files now carry the '.qqlo' file extension as part of their original names. Another change caused by the threat will be the appearance of an unfamiliar text file named '_readme.txt.' The file contains a detailed ransom note with instructions for the affected users.

The Qqlo Ransomware's operators apparently demand to be paid a ransom of $980. In exchange, they will supposedly provide their victims with a decryptor tool and the decryption keys necessary for the restoration of the files. Of course, trusting the words of cybercriminals is rather risky. The hackers may run away with the money without providing any assistance or they may be unable to fully restore all of the encrypted files. Still, the note mentions that users may pick and send one locked file to be decrypted for free. The cybercriminals leave two email addresses - 'restorealldata@firemail.cc' and 'gorentos@bitmessage.ch,' as well as a Telegram account at '@datarestore.'

The entire ransom-demanding message left by Qqlo Ransomware is:

'ATTENTION!

Don't worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-WbgTMF1Jmw
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
restorealldata@firemail.cc

Reserve e-mail address to contact us:
gorentos@bitmessage.ch

Our Telegram account:
@datarestore

Your personal ID:'

Trending

Most Viewed

Loading...