Kitz Ransomware Will Scramble All Your Files

During our review of recently submitted malware samples, our team discovered Kitz, a type of ransomware belonging to the Djvu ransomware family.

This malware can be distributed in conjunction with other types of malware, such as RedLine or Vidar. Kitz works by using encryption to lock files on the targeted computer and appending the ".kitz" extension to the filename of each encrypted file. A ransom note, named "_readme.txt," is also dropped on the infected computer. The note explains that a unique key and a specific decryption tool are necessary to decrypt the files, which are offered for sale by the attackers for either $980 or $490, depending on when the victim contacts them.

Victims can communicate with the attackers via two provided email addresses (support@freshmail.top and datarestorehelp@airmail.cc), and they can test the decryption process by sending a single encrypted file before committing to purchasing the decryption tools.

Kitz Ransom Note Increases Demand After 72 Hours

The full ransom note used by Kitz reads as follows:

ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-lEbmgnjBGi
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
support@freshmail.top

Reserve e-mail address to contact us:
datarestorehelp@airmail.cc

Your personal ID:

How Can Ransomware Strains Like Kitz Infect Your System?

Ransomware strains like Kitz can infect your system through various means, such as:

Email attachments: Attackers can send phishing emails with malicious attachments that contain the ransomware. Once the attachment is downloaded and opened, the ransomware can infect the system.

Malicious links: Attackers can also send phishing emails with links to malicious websites that contain the ransomware. Clicking on the link and downloading the malware from the website can infect the system.

Exploit kits: Attackers can use exploit kits to take advantage of vulnerabilities in software or operating systems. When the user visits a compromised website, the exploit kit can automatically download and install the ransomware on the system.

Malvertising: Attackers can also use malvertising to infect systems with ransomware. They create ads that contain malicious code, and when the user clicks on the ad, the ransomware can be downloaded and installed on the system.

It is important to note that ransomware attacks can be prevented by taking precautions such as keeping software and operating systems up to date, avoiding opening suspicious email attachments or clicking on suspicious links, and using anti-malware software to scan files and websites before downloading or visiting them.