Sijr Ransomware
The Sijr ransomware is a newly discovered strain of file-encrypting malware. According to researchers, it belongs to the Djvu ransomware family, as it shares a number of similarities with other Djvu variants, including a ransom note named "_readme.txt" and very similar text used in the note.
The ransomware, once deployed on a target system, will encrypt the majority of non-essential files found on the system drives, including text documents, photos and images, databases as well as video and music files. The encrypted files preserve their original filenames once scrambled by the Sijr ransomware, but they receive a new appended extension - .sijr. This means that a file that was formerly called "photo.jpg" will become "photo.jpg.sijr" once it has been encrypted.
Once encryption has finished, the Sijr ransomware drops its ransom note in a plain text file called "_readme.txt". The full text of the ransom note is as follows:
ATTENTION!
Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-6Ti2DxXR3I
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.
To get this software you need write on our e-mail:
manager at time2mail dot ch
Reserve e-mail address to contact us:
supportsys at airmail dot cc
Your personal ID:
The hackers are trying to use simple tricks to coax victims into paying up faster, offering a "discount" of sorts on the ransom payment. Of course, there is no guarantee that you will ever get your files back, even if you make use of the free sample of one decrypted file offered as proof of a working decryptor.
