DASHA Ransomware Lists No Ransom Sum

There is a new variant of the Eternity ransomware family in the wild. The new version is called the DASHA ransomware.

DASHA does everything you would expect from a ransomware threat. It will encrypt the victim system, leaving almost every file scrambled. Encrypted file types include media, document, archive and database files.

Once encrypted, the files receive the ".ecrp" extension appended to them. This will effectively turn a file named "document.txt" into "document.txt.ecrp" after encryption.

DASHA doesn't have the usual ransom note in plain text format as a .txt file like most other ransomwares. Instead, the ransom note is displayed inside a pop-up window and the desktop wallpaper is also changed to an image with more text on it. The pop-up window contains the following text:

All of your files have been ENCRYPTED with DASHA RANSOMWARE

Your computer was infected with a ransomware. Your files have been encrypted and you won't

be able to decrypt them without our help.

What can I do to get my files back?

Contact us

Email: dashasupport at proton dot me

Telegram: hxxps://t.me/dashasupport

The wallpaper reads as follows:

YOUR COMPUTER HAS BEEN ENCRYPTED WITH DASHA RANSOMWARE

CONTACT OUR TEAM

Email: dashasupport at proton dot me

Telegram: @dashasupport

September 2, 2022
Loading...

Cyclonis Backup Details & Terms

The Free Basic Cyclonis Backup plan gives you 2 GB of cloud storage space with full functionality! No credit card required. Need more storage space? Purchase a larger Cyclonis Backup plan today! To learn more about our policies and pricing, see Terms of Service, Privacy Policy, Discount Terms and Purchase Page. If you wish to uninstall the app, please visit the Uninstallation Instructions page.

Cyclonis Password Manager Details & Terms

FREE Trial: 30-Day One-Time Offer! No credit card required for Free Trial. Full functionality for the length of the Free Trial. (Full functionality after Free Trial requires subscription purchase.) To learn more about our policies and pricing, see EULA, Privacy Policy, Discount Terms and Purchase Page. If you wish to uninstall the app, please visit the Uninstallation Instructions page.