Neon Ransomware Will Lock Your System

Our researchers discovered the Neon ransomware variant, which is another member of the numerous Djvu ransomware clone family.

Neon encrypts files on victim systems and makes them inaccessible. Files encrypted by Neon receive a new extension, with ".neon" appended after their original one. The ransomware affects a wide range of file types, including most commonly encountered media, document and archive filetypes.

Once the Neon ransomware finishes encryption of the victim system's drives, it produces its ransom note in a file named "_readme.txt". The ransom note asks victims to contact the hackers behind Neon using two email addresses: restorealldata@firemail.cc and gorentos@bitmessage.ch.

Neon Ransom Note Presents Extortion as "Discount"

The full text of the Neon ransomware goes as follows:

ATTENTION!

Don't worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-WbgTMF1Jmw
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
restorealldata@firemail.cc

Reserve e-mail address to contact us:
gorentos@bitmessage.ch

Our Telegram account:
@datarestore

Your personal ID:

Why Should You Never Pay Ransom to Hackers?

Paying a ransom to hackers is strongly discouraged for several reasons:

• No guarantee of file recovery: There is no guarantee that paying the ransom will result in the safe recovery of your encrypted files. Cybercriminals are not bound by any code of ethics, and there have been cases where victims paid the ransom but did not receive the promised decryption keys or tools. You could end up losing your money without any resolution.
• Reinforcing criminal activities: By paying the ransom, you are essentially funding and supporting criminal activities. This encourages hackers to continue their malicious operations, develop more sophisticated ransomware, and target more victims. Paying the ransom perpetuates the ransomware ecosystem, putting others at risk.
• Increased victim targeting: If hackers find that victims are willing to pay ransoms, they are more likely to target them again or share their information with other cybercriminals. Paying the ransom puts a target on your back, making you more vulnerable to future attacks.
• Legal and ethical concerns: Paying a ransom may violate local laws and regulations. It is important to consult legal authorities and law enforcement agencies to understand the legal implications of engaging with cybercriminals. Supporting illegal activities can have severe consequences for individuals and organizations.
• Encourages more sophisticated attacks: When ransom payments are made, hackers are motivated to invest in developing more advanced ransomware strains and techniques. This leads to the creation of stronger and more damaging threats, putting an even larger number of people at risk.