Dapo Ransomware Will Make Your Files Unreadable

After examining malware samples, we discovered a new ransomware variant named Dapo. Further analysis revealed that Dapo belongs to the Djvu ransomware family, which is frequently associated with information stealers like RedLine and Vidar. Dapo encrypts data, changes file names, and generates a "_readme.txt" file containing ransom demands.

Dapo modifies file names by appending the ".dapo" extension to each file. For example, "1.jpg" would be renamed "1.jpg.dapo", while "2.png" would be renamed "2.png.dapo". The ransom note warns that the victim's files have been encrypted and can only be accessed by purchasing decryption software and a unique key. The decryption tools cost $980, but the attackers offer a 50% discount if victims contact them within 72 hours, reducing the price to $490.

The ransom note stresses that the victim will not be able to restore their files without paying the ransom. The attackers offer to decrypt one file for free and provide two email addresses, support@freshmail.top and datarestorehelp@airmail.cc, for victims to contact them.

Dapo Copies Usual Djvu Ransom Note

The full text of the Dapo ransom note goes as follows:

ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-vbVkogQdu2
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
support@freshmail.top

Reserve e-mail address to contact us:
datarestorehelp@airmail.cc

Your personal ID:

How Can You Protect Your Data from Ransomware Like Dapo?

There are several steps you can take to protect your data from ransomware like Dapo:

Keep your operating system and software up to date: Regularly update your software and operating system to ensure that you have the latest security patches and fixes.

Install and update antivirus software: Install a reputable antivirus software and keep it up to date with the latest definitions.

Avoid opening suspicious emails or attachments: Be cautious when opening emails or attachments from unknown or suspicious sources, as they may contain malware.

Use strong and unique passwords: Use strong passwords that are difficult to guess, and avoid using the same password for multiple accounts.

Enable two-factor authentication: Enable two-factor authentication whenever possible to add an extra layer of security to your accounts.

Back up your data: Regularly back up your data to an external hard drive or cloud-based service. This way, even if your data is encrypted by ransomware, you can restore it from your backup.