DVN Ransomware Asks for a Small Amount of BTC as Ransom

Our research team recently stumbled upon DVN, a type of ransomware that is a variation of Chaos ransomware, while analyzing new malware samples.

The main goal of DVN ransomware is to encrypt data, and it accomplishes this by adding the ".devinn" extension to filenames and changing the victim's desktop wallpaper. To demand a ransom, it creates a file named "unlock_here.txt," which serves as a ransom note, informing the victim of the encryption and providing instructions for purchasing decryption software from the attackers for $200 in Bitcoin. The note also includes a specific Bitcoin address to send the payment.

DVN Ransom Note Asks for 0.007 BTC in Ransom Payment

The full text of the DVN ransom note goes as follows:

All of your files have been encrypted
Your computer was infected with a ransomware virus. Your files have been encrypted and you won't
be able to decrypt them without our help.What can I do to get my files back?You can buy our special
decryption software, this software will allow you to recover all of your data and remove the
ransomware from your computer.The price for the software is $200. Payment can be made in Bitcoin only.

Payment informationAmount: 0.0077 BTC
Bitcoin Address: 17CqMQFeuB3NTzJ2X28tfRmWaPyPQgvoHV

Why Should You Never Play Along and Pay Ransom to Hackers?

There are several reasons why it's not recommended to play along and pay ransom to hackers. Firstly, paying ransom encourages the behavior of hackers and reinforces their belief that they can profit from their criminal activities. This, in turn, can lead to more attacks in the future, targeting not only individuals but also businesses and organizations.

Secondly, there is no guarantee that paying the ransom will result in the return of your encrypted data. Hackers may take the money and run, leaving your data still inaccessible, or provide a decryption key that doesn't work correctly.

Thirdly, paying ransom can lead to further demands for more money or even blackmail. Once you've paid once, hackers may try to extort more money from you or use the information they've obtained to threaten you with exposure or embarrassment.

Finally, paying ransom puts you at risk of becoming a victim of future attacks. Hackers often target victims who have already paid once, seeing them as a profitable target.

Therefore, it's crucial to avoid paying ransom to hackers, report the incident to the authorities, and seek professional help to recover your data safely. Investing in good security measures and backups is always a better approach to prevent and manage cyber-attacks.