Rigj Ransomware
The Rigj Ransomware is a threat from the STOP/Djvu malware family. Although it doesn't exhibit any meaningful improvement or modifications over the other variants from the family, Rigj can still cause massive damage to the computers it manages to infect. Other ransomware threats include Pqgs, HELPME, Nope and more.
The Rigj Ransomware uses a strong encryption process to render the victim's files both unusable and inaccessible. The threat will mark each affected file by appending '.rigj' to the original file names as a new extension. When all targeted files have been locked, a text file named '_readme.txt' will be created on the compromised device. It will carry Rigj Ransomware's ransom note.
Demands Overview
The note dropped by the Rigj Ransomware is identical to the messages of other STOP/Djvu variants. The hackers state that they want to be paid exactly $980 if they are to help the victims get their files back by sending the necessary decryption key and software tool.
The offer to reduce the amount of the ransom by 50% to $490 also is here. The only requirement is for affected users to initiate communication with the attackers within the first 72 hours of the Rigj attack. The note mentions two email addresses that can be used for that purpose - 'manager@mailtemp.ch' and 'helprestoremanager@airmail.cc.' As part of their message, users also can send a single locked file to be decrypted for free.
The full text of the note is:
'ATTENTION!
Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-Tjb0YqckGX
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.To get this software you need write on our e-mail:
manager@mailtemp.chReserve e-mail address to contact us:
helprestoremanager@airmail.ccYour personal ID:'
