Rryy Ransomware
Analysis of Rryy Ransomware has revealed that the threat is another variant created from the infamous STOP/Djvu family. The continued influx of potent STOP/Djvu malware showcases how popular this strain is among cybercriminals. As for Rryy in particular, although the threat lacks any major improvements, its capability to cause damage remains significant. In fact, the vast majority of the files stored on infected devices will be encrypted with a military-grade encryption algorithm and rendered completely unusable. Without paying a ransom to the attackers and receiving the required decryption keys, restoration of the data could be practically impossible. As part of its actions, the threat will also append '.rryy' to the names of the locked files.
As is typically the case when it comes to ransomware threats, Rryy will deliver a ransom note to the breached devices containing instructions for the victims. The note will be found inside a newly generated text file named '_readme.txt.' It states that affected users must pay $980 to the threat actors. This initial sum can be decreased by 50% depending on whether victims contact the hackers within the first 72 hours of the ransomware infection. According to the note, the hackers also offer to decrypt one file for free. However, the chosen file must not contain any important data. Victims can message the cybercriminals on their two email adresses ('restorealldata@firemail.cc' and 'gorentos@bitmessage.ch') or Telegram account ('@datarestore').
The entire set of instructions left by Rryy Ransomware is:
ATTENTION!
Don't worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-WbgTMF1Jmw
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.
To get this software you need write on our e-mail:
restorealldata@firemail.cc
Reserve e-mail address to contact us:
gorentos@bitmessage.ch
Our Telegram account:
@datarestore
Your personal ID:
