Eqza Ransomware Will Encrypt Victim Drives

Eqza, identified as ransomware through an examination of malware samples, has been linked to the Djvu family. This ransomware encrypts files, appends the ".eqza" extension to file names, and deposits a ransom note named "_readme.txt." For instance, it alters filenames like "1.jpg" to "1.jpg.eqza" and "2.png" to "2.png.eqza."

Given Eqza's affiliation with the Djvu family, there is a considerable likelihood that cybercriminals distribute this ransomware in conjunction with information stealers such as Vidar or RedLine. The ransom note advises victims that their files, encompassing images, databases, and crucial documents, have undergone encryption. To regain access, victims are instructed to procure a decryption tool and a unique key. The note provides a guarantee, permitting victims to submit one encrypted file for complimentary decryption, provided the file lacks valuable information.

The cost of obtaining the private key and decryption software is set at $980. However, there exists an opportunity for a 50% discount if victims establish contact with the attackers within the initial 72 hours, thereby reducing the price to $490. Victims can communicate with the cybercriminals through the provided email addresses: support@freshmail.top and datarestorehelp@airmail.cc.

Eqza Ransom Note in Full

The complete text of the Eqza ransom note reads as follows:

ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-Y6UIMfI736
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
support@freshmail.top

Reserve e-mail address to contact us:
datarestorehelp@airmail.cc

Your personal ID:

How Can You Safeguard Your Files Against Ransomware Attacks?

Safeguarding your files against ransomware attacks involves a combination of proactive measures and best practices to minimize the risk and potential impact of such incidents. Here are some effective strategies:

Regularly Back Up Your Data:
Perform regular backups of your important files and ensure they are stored in a secure and separate location, such as an external hard drive or a reliable cloud service.
Automate the backup process to ensure consistency and reduce the chance of human error.

Keep Software and Operating Systems Updated:
Regularly update your operating system, antivirus software, and all applications to patch vulnerabilities that could be exploited by ransomware.
Enable automatic updates whenever possible to ensure you have the latest security patches.

Use Reliable Security Software:
Install reputable antivirus and anti-malware software to detect and block malicious activities, including ransomware.
Keep security software definitions up to date to enhance its effectiveness against new threats.

Exercise Caution with Email:
Be skeptical of unsolicited emails, especially those containing attachments or links. Avoid opening attachments or clicking on links from unknown or suspicious sources.
Verify the legitimacy of email communications, especially those requesting sensitive information or urging urgent action.