Qqqw Ransomware
The STOP/Djvu Ransomware family continues to pose a considerable risk to users' computers, with new variants being discovered in the wild. One such threat is the Qqqw Ransomware. It is confirmed as another STOP/Djvu variant that possesses all of the destructive capabilities associated with this malware family.
If the attackers deploy the threat on targeted computers successfully, they can cause significant damage. Victims will notice that they are no longer able to access any of their documents, pictures, archives, databases and other important files. The cryptographic algorithm used by the threat guarantees that restoration of the locked files without having the necessary decryption key is effectively impossible.
As for its action, Qqqw is consistent with other variants of this family. The threat will append its own file extension - '.qqqw,' to the names of the encrypted files. Then, it will drop a ransom note with instructions for the victims. THe ransom-demanding message will be contained inside a newly-created text file named '_readme.txt.'
Ransom Note's Overview
The ransom note of the Qqqw Ransomware informs explicitly that affected users will have to pay the attackers if they want to regain access to their files. The price of the demanded ransom is set at $980, which is the standard for this malware family. The offer to reduce the price by 50% also is mentioned in the note. If the hackers can be believed, users just need to contact them within the first 72 hours of the Qqqw Ransomware attack.
Two note provides two email addresses that can be used as communication channels - 'restorealldata@firemail.cc' and 'gorentos@bitmessage.ch.' However, somewhat surprisingly, it also mentions a Telegram account - '@datarestore.' During the communication, victims can choose a single file to send to the cybercriminals. If the file doesn't contain any important data, it is supposed to be unlocked and returned for free.
The full text of the note is:
'ATTENTION!
Don't worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-WbgTMF1Jmw
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.To get this software you need write on our e-mail:
restorealldata@firemail.ccReserve e-mail address to contact us:
gorentos@bitmessage.chOur Telegram account:
@datarestoreYour personal ID:'
