Azop Ransomware Will Scramble Your Files

While analyzing new malware samples, we stumbled upon the Azop ransomware, which belongs to the Djvu malware family. Once it infiltrates a computer, this ransomware encrypts files and adds the ".azop" extension to their names. For example, "1.jpg" becomes "1.jpg.azop," and "2.png" becomes "2.png.azop."

In addition, the Azop ransomware generates a ransom note in the form of a text document called "_readme.txt." Furthermore, the distribution of Azop may involve other malware used for stealing information.

The ransom note explicitly states that all files, including images, databases, documents, and other important data, have been encrypted using a strong and unique encryption method. To regain access to these files, victims are instructed to obtain a decryption tool and a unique key through a purchase.

The cost to obtain the private key and decryption software is $980. However, if victims contact the cybercriminals within 72 hours, they are offered a 50% discount, reducing the price to $490. The note emphasizes that without payment, data restoration is extremely difficult. It provides two email addresses for victims to contact the attackers: support@freshmail.top and datarestorehelp@airmail.cc.

Azop Ransom Note in Full

The Azop ransom note generated by the malware reads as follows:

ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-e5pgPH03fe
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
support@freshmail.top

Reserve e-mail address to contact us:
datarestorehelp@airmail.cc

Your personal ID:

How Can Ransomware Like Azop Get on Your Computer?

Ransomware like Azop can infiltrate your computer through various means, and it's essential to be vigilant to prevent such infections. Here are some common ways ransomware can get on your computer:

• Phishing Emails: Cybercriminals often use phishing emails to distribute ransomware. They send emails that appear legitimate, containing malicious attachments or links. Clicking on these links or opening infected attachments can trigger the ransomware installation.
• Malicious Downloads: You may unknowingly download ransomware when you visit compromised or malicious websites. This can happen if you download files or software from untrustworthy sources.
• Exploiting Vulnerabilities: Ransomware can exploit vulnerabilities in your operating system or software. Keeping your software and operating system up to date with security patches is crucial in preventing these exploits.
• Malvertising: Cybercriminals can use malicious advertisements (malvertising) to deliver ransomware. These ads may appear on legitimate websites and can infect your computer if you click on them.
• RDP (Remote Desktop Protocol) Attacks: If you have Remote Desktop Protocol enabled on your computer with weak or default passwords, attackers may gain unauthorized access and deploy ransomware.
• Drive-by Downloads: Visiting compromised websites can lead to drive-by downloads, where malware, including ransomware, is automatically downloaded and executed without your consent.
• Infected Software: Downloading cracked or pirated software from unofficial sources can introduce ransomware onto your system. These versions often hide malicious code.
• Social Engineering: Attackers may use social engineering techniques to trick you into downloading and running malicious files. They might impersonate tech support, for example, and convince you to install malware.
• USB Drives: If you plug in an infected USB drive or external storage device into your computer, it can spread ransomware to your system.