Qqjj Ransomware - Djvu Clone Business as Usual

Qqjj is the name of yet another Djvu ransomware clone that was spotted in the wild only recently. This is the latest Djvu clone that joins a host of hundreds of other variants based on the same code and using the same infrastructure and templating.

Qqjj will encrypt a victim system, leaving files on it unreadable, including most media, archive, database and document file types.

Once encrypted, files will receive the ".qqjj" extension appended to them. This will transform a file originally called "document.txt" into "document.txt.qqjj" upon encryption.

The ransomware deposits its ransom demands inside a file called "_readme.txt" and the note follows the exact template shared by every other recent Djvu clone.

The full text of the note is below:

ATTENTION!

Don't worry, you can return all your files!

All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.

The only method of recovering files is to purchase decrypt tool and unique key for you.

This software will decrypt all your encrypted files.

What guarantees you have?

You can send one of your encrypted file from your PC and we decrypt it for free.

But we can decrypt only 1 file for free. File must not contain valuable information.

You can get and look video overview decrypt tool:

hxxps://we.tl/t-USug3rryKI

Price of private key and decrypt software is $980.

Discount 50% available if you contact us first 72 hours, that's price for you is $490.

Please note that you'll never restore your data without payment.

Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:

support at bestyourmail dot ch

Reserve e-mail address to contact us:

datarestorehelp at airmail dot cc

Your personal ID: