Gycc Ransomware Will Lock Your Files

The Gycc ransomware, identified during the examination of new malicious file samples, has been linked to the Djvu malware family. This specific ransomware variant operates by encrypting files and appending the ".gycc" extension to their names, accompanied by a ransom note ("_readme.txt").

Highlighting its behavior of altering filenames, Gycc changes "1.jpg" to "1.jpg.gycc," "2.png" to "2.png.gycc," and so on. Given its association with the Djvu family, there is a considerable likelihood that Gycc is distributed alongside information stealers like Vidar or RedLine by cybercriminals.

The ransom note declares that various files, encompassing images, databases, and crucial documents, have undergone encryption. To regain access, victims are instructed to acquire a decryption tool and a unique key. The note provides assurance by allowing victims to submit one encrypted file for complimentary decryption, provided it lacks valuable information.

The cost for obtaining the private key and decryption software is set at $980. However, a 50% discount opportunity is presented if victims contact the attackers within the initial 72 hours, effectively reducing the price to $490. Victims can establish communication with the cybercriminals using the provided email addresses, namely support@freshmail.top and datarestorehelp@airmail.cc.

Table of Contents

Gycc Ransom Note Increases Ransom in 72 Hours

The full text of the Gycc ransom note reads as follows:

ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-CDZ4hMgp2X
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
support@freshmail.top

Reserve e-mail address to contact us:
datarestorehelp@airmail.cc

Your personal ID:

How Can You Protect Your Files From Ransomware?

Protecting your files from ransomware requires a combination of proactive measures and a vigilant approach to cybersecurity. Here are some effective ways to safeguard your files:

Regular Backups:
Frequently back up your important files and data to an external hard drive, a secure cloud service, or both.
Ensure that backups are automated and stored in a location that is not directly accessible from your computer.

Update Software and Operating Systems:
Keep your operating system, antivirus software, and all other applications up to date with the latest security patches.
Enable automatic updates whenever possible to ensure timely protection against vulnerabilities.

Use Reliable Security Software:
Install reputable antivirus and anti-malware software on your computer and keep it updated.
Consider using security suites that offer real-time protection and behavior analysis.

Exercise Caution with Email:
Be wary of email attachments and links, especially if the email is unexpected or from an unfamiliar sender.
Avoid clicking on suspicious links or downloading attachments from unknown sources.

Implement Network Security:
Use firewalls and intrusion detection/prevention systems to protect your network from unauthorized access.
Secure your Wi-Fi network with a strong password and encryption.