Negotiations With Oori Ransomware Hackers Should Be Avoided

Malware experts issued a warning about a new threatening ransomware variant from the STOP/Djvu Ransomware family. The newly uncovered threat is named Oori Ransomware and its objective is to lock any computer it finds a way to infect. To prevent the computers' files from being opened, the Oori Ransomware encrypts the. Then, it will try to extort its victims for money, as a condition to recover the affected data. The Oori Ransomware does not show any relevant improvement that may differentiate it from typical STOP/Djvu Ransomware. However, don't be fooled; it doesn't make the Oori Ransomware any less threatening.

Once inside a system, the Oori Ransomware will encipher almost all of the user's data. However, it will avoid system-critical files. The enciphered files are easy to be recognized because they will have the '.oori' file extension appended to their native names. After enciphering the files, the Oori Ransomware will drop its ransom note with instructions for victims that are willing to pay the ransom.

Ir says to get the decryption key from the attackers, victims will have to pay $980 as a ransom. However, if they contact the Oori Ransomware operators within the first 72 hours of the malware attack the price drops to $490. There are two email addresses - 'support@bestyourmail.ch and supportsys@airmail.cc' that will be found inside the ransom note that should be used as a negotiation channel They also offer to prove that they have a working decryption product by decrypting one single file for free.

However, negotiations with ransomware creators should be avoided since victims will never know if rewarding criminals for their bad deeds will make them honor their part of the bargain, besides exposing them to security risks.

The full text of the Oori Ransomware's note is:

'ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-eglcxvZv1s
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.