Cdcc Ransomware Will Hold Your Data Hostage

After a recent analysis of malicious file samples, we discovered the Cdcc ransomware that is linked to the Djvu ransomware family. Its primary objective is to encrypt data, appending the ".cdcc" extension to filenames and generating a ransom note ("_readme.txt"). For example, it transforms "1.jpg" into "1.jpg.cdcc," "2.png" into "2.png.cdcc," and so on.

It's worth noting that Djvu family variants are frequently distributed alongside information stealers like RedLine and Vidar. The ransom note assures victims that full recovery of all files, including pictures, databases, and essential documents, is feasible. The files have been encrypted using robust algorithms and a unique key. The note emphasizes that the sole method for file restoration is by acquiring a decryption tool and key.

As a gesture of assurance, the note offers an option for a complimentary decryption of one file, specifying that the chosen file should not contain valuable information. The stated cost for obtaining the private key and decryption software is $1999, but a 50% discount is provided if contact is initiated within the initial 72 hours, reducing the price to $999.

The note warns that data restoration is impossible without payment. To obtain the necessary tools, victims are instructed to contact the email address support@freshingmail.top or use an alternative email address, datarestorehelpyou@airmail.cc.

Cdcc Ransom Note Uses Standard Djvu Format

The complete text of the Cdcc ransom note reads as follows:

ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted
with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-iVcrVFVRqu
Price of private key and decrypt software is $1999.
Discount 50% available if you contact us first 72 hours, that's price for you is $999.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
support@freshingmail.top

Reserve e-mail address to contact us:
datarestorehelpyou@airmail.cc

Your personal ID:

How Can You Safeguard Your Data Against Ransomware Attacks?

Safeguarding your data against ransomware attacks is crucial to protecting your personal and business information. Here are several measures you can take to enhance your defenses against ransomware:

Regular Backups:
Perform regular backups of your important data and ensure they are stored in an isolated and secure location.
Automate the backup process if possible, and verify the integrity of backups regularly.

Update Software and Systems:
Keep your operating system, software, and applications up to date with the latest security patches.
Enable automatic updates to ensure timely protection against known vulnerabilities.

Use Reliable Security Software:
Install reputable antivirus and anti-malware software to detect and prevent ransomware infections.
Keep the security software up to date and conduct regular scans of your system.

Implement Email Security Measures:
Use email filtering solutions to block or quarantine phishing emails and malicious attachments.
Be cautious when clicking on links or downloading attachments, especially from unknown or unexpected sources.