Uazq Ransomware is a New Djvu Family Member

After examining new malware samples, we found that Uazq is a ransomware associated with the Djvu family. Uazq operates by encrypting data and adjusting file names by adding the ".uazq" extension. To illustrate, it alters "1.jpg" to "1.jpg.uazq", "2.png" to "2.png.uazq", and so on.

Moreover, Uazq generates a ransom note in the form of a text file named "_README.txt". Notably, the individuals responsible for Djvu ransomware frequently incorporate data-stealing malware such as Vidar or RedLine into their illicit activities.

The ransom note specifies that a broad array of files, including images, databases, and documents, have been encrypted using a robust algorithm. To regain access to these files, victims need to obtain a specialized decryption tool along with a unique key. The attackers demand a payment of $999 for these tools, offering a 50% discount if contacted within 72 hours.

Furthermore, they propose to decrypt one file as a demonstration of their capabilities, provided it does not contain valuable data. Contact details for the cybercriminals include support@freshingmail.top and datarestorehelpyou@airmail.cc.

Uazq Ransom Note in Full

The complete text of the Uazq ransom note reads as follows:

ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
Do not ask assistants from youtube and recovery data sites for help in recovering your data.
They can use your free decryption quota and scam you.
Our contact is emails in this text document only.
You can get and look video overview decrypt tool:

Price of private key and decrypt software is $999.
Discount 50% available if you contact us first 72 hours, that's price for you is $499.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
support@freshingmail.top

Reserve e-mail address to contact us:
datarestorehelpyou@airmail.cc

Your personal ID:

How Can You Safeguard Your Data Against Ransomware Attack?

Protecting your data against ransomware attacks requires a multi-layered approach to mitigate risks effectively. Here are several steps you can take to safeguard your data:

Regularly Backup Your Data: Ensure you have regular backups of your important data stored securely offline or in the cloud. This way, even if your system is compromised, you can restore your files without having to pay the ransom.

Keep Software Updated: Maintain up-to-date operating systems, software, and applications. Regularly install security patches and updates to address known vulnerabilities that attackers might exploit.

Implement Robust Security Measures: Utilize reputable antivirus or antimalware software and firewall protection to detect and block potential threats. Enable automatic updates and real-time scanning for enhanced security.

Exercise Caution with Email Attachments and Links: Be cautious when opening email attachments or clicking on links, especially if they are from unknown or suspicious senders. Verify the legitimacy of the sender before downloading any attachments or clicking on links.

Restrict User Privileges: Limit user permissions to only necessary systems and data. This can help prevent ransomware from spreading laterally across your network if one user account becomes compromised.

Employ Email Filtering: Implement email filtering solutions to detect and block phishing emails or emails containing malicious attachments or links before they reach users' inboxes.

Use Behavior-Based Detection: Consider deploying advanced security solutions that use behavior-based detection techniques to identify and stop ransomware attacks in real-time, even if they use previously unseen malware variants.

By implementing these proactive measures, you can significantly reduce the likelihood of falling victim to a ransomware attack and protect your valuable data.