Mzop Ransomware is a New Djvu Clone

Mzop is a ransomware that encrypts files and adds the ".mzop" extension to their filenames, as well as creating a ransom note called "_readme.txt". It has been identified by our team while inspecting malware samples on VirusTotal. For example, it changes "1.jpg" to "1.jpg.mzop", and so forth. Mzop is part of the Djvu ransomware family, which is often distributed alongside other malicious programs such as RedLine and Vidar.

The ransom note contains two email addresses and instructs victims to contact the attackers within 72 hours in order to pay a lower fee for decryption tools (instead of $980). It also states that it is impossible to decrypt files without specific tools or keys purchased from threat actors. Furthermore, victims are offered the chance to send one file for free decryption before paying any money.

It is important for users to be aware of Mzop ransomware and its capabilities in order to protect themselves from becoming victims of this malicious program. Taking preventive measures such as regularly backing up data can help reduce the risk of being infected with ransomware like Mzop, as well as other malicious software.

The full text of the note generated by the Mzop ransomware reads as follows:

ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-cud8EGMtyB
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
support@freshmail.top

Reserve e-mail address to contact us:
datarestorehelp@airmail.cc

Your personal ID:

Table of Contents

What is the Djvu ransomware family that Mzop belongs to?

The Djvu ransomware family is a group of malicious programs that are designed to encrypt files and demand payment in exchange for a decryption key. It is believed to be related to the STOP/DJVU ransomware, which was first discovered in 2019. The Djvu family of ransomware clones includes Mzop, RedLine, Vidar, and other information stealers. These programs typically append a unique extension to encrypted files (such as ".mzop") and create a ransom note with instructions on how to pay the ransom. The ransom note usually contains two email addresses and instructs victims to contact the attackers within 72 hours in order to pay a lower fee for decryption tools. Additionally, victims may be offered the chance to send one file for free decryption before paying any money. It is important for users to be aware of these threats and take preventive measures such as regularly backing up data in order to protect themselves from becoming victims of this malicious software.

How can you protect your system from ransomware like Mzop?

In order to protect your system from ransomware like Mzop, it is important to take preventive measures such as regularly backing up data. This will ensure that you have a copy of your files in case they become encrypted by ransomware. Additionally, it is important to keep your operating system and software up-to-date with the latest security patches in order to reduce the risk of infection. It is also recommended to use an antivirus program with real-time protection and scan your computer regularly for any malicious programs. Furthermore, users should be cautious when opening emails or downloading attachments from unknown sources, as these can contain malicious links or files that could lead to a ransomware infection. Finally, users should avoid clicking on suspicious links or visiting websites that are known for hosting malicious content. By following these steps, users can help protect their systems from becoming victims of ransomware like Mzop.

Can an anti-malware application prevent a ransomware infection?

Yes, an anti-malware application can help prevent a ransomware infection. Anti-malware applications are designed to detect and remove malicious software from your system, including ransomware. These programs use advanced algorithms to scan for known threats and suspicious activity on your computer, allowing them to detect and block any malicious files before they can cause damage. Additionally, many anti-malware applications also offer real-time protection that will alert you if it detects any suspicious activity or attempts to access your system. By using an anti-malware application with real-time protection, users can help protect their systems from becoming victims of ransomware like Mzop.