Sspq Ransomware

Infosec researchers have detected a new threatening ransomware variant from the infamous and proliferous STOP/Djvu Ransomware family. The new threat is named Sspq Ransomware and aims to lock any computer it manages to infect, by encrypting the files stored there. Victims will then be extorted for money if they want to restore the affected data. The Sspq Ransomware shows little meaningful improvements over the typical STOP/Djvu Ransomware variants but that doesn't make the threat any less threatening. 

Once delivered to the system, the Sspq Ransomware will encrypt most of the user's information, while avoiding any system-critical files. All locked files will have '.sspq' appended to their original names as a new extension. Afterward, the malware will drop its ransom note containing the instructions of the cybercriminals.

The note claims that to receive the decryption key from the hackers, users will have to pay exactly $980 as a ransom. If they contact the Sspq Ransomware operators within the first 72 hours of the malware infection, the price will supposedly be slashed in half to $490. Victims can use the two email addresses - 'helpteam@mail.ch' and 'helpmanager@airmail.cc,' found inside the ransom note as communication channels. They are also allowed to attach a single file that will be decrypted for free.

Victims of ransomware attacks should avoid entering into negotiations with the cybercrimianals responsible for unleashing the threat because doing so could expose them to additional security risks. Not to mention that there are no guarantees that the hackers will honor their end of the deal and won't simply take the money and move on to their next threatening operation. 

The full text of Sspq Ransomware's note is:

'ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-eglcxvZv1s
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
helpteam@mail.ch

Reserve e-mail address to contact us:
helpmanager@airmail.cc

Your personal ID:'