Vepi Ransomware Scrambles Most File Types

We discovered Vepi is a type of ransomware within the Djvu family. Upon infiltration, Vepi encrypts files and adds the ".vepi" extension to their filenames, along with leaving a ransom note named "_readme.txt".

For example, Vepi renames files like "1.jpg" to "1.jpg.vepi" and "2.png" to "2.png.vepi". The distribution of ransomware variants from the Djvu family often involves deploying information stealers such as Vidar or RedLine.

The ransom note informs victims that all their files, including pictures, databases, and documents, have been encrypted using strong encryption and a unique key. It warns that without payment, the data cannot be restored. Victims are instructed to purchase decryption tools for $999, although a 50% discount is offered if the threat actors are contacted within 72 hours. The provided email addresses for contact are support@freshingmail.top and datarestorehelpyou@airmail.cc.

Table of Contents

Vepi Ransom Note Demands $999 in Ransom Payment

The full text of the Vepi ransom note goes as follows:

ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
Do not ask assistants from youtube and recovery data sites for help in recovering your data.
They can use your free decryption quota and scam you.
Our contact is emails in this text document only.

You can get and look video overview decrypt tool:

Price of private key and decrypt software is $999.
Discount 50% available if you contact us first 72 hours, that's price for you is $499.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
support@freshingmail.top

Reserve e-mail address to contact us:
datarestorehelpyou@airmail.cc

Your personal ID:

How Can You Safeguard Your Data Against Ransomware Attacks?

Safeguarding your data against ransomware attacks involves implementing several proactive measures to minimize the risk of infection and protect your valuable information. Here are some effective strategies:

Use Reliable Antivirus and Antimalware Software: Install reputable antivirus and antimalware software on all your devices and keep them updated. These programs can help detect and block ransomware threats before they can execute.

Keep Your Software Updated: Regularly update your operating system, software applications, and browsers to patch security vulnerabilities that could be exploited by ransomware attackers.

Exercise Caution with Email Attachments and Links: Be wary of unexpected or suspicious emails, especially those containing attachments or links. Do not open attachments or click on links from unknown or untrusted sources.

Enable Pop-up Blockers: Configure your web browser to block pop-ups, as they can be used to deliver ransomware or other malicious software.

Backup Your Data Regularly: Perform regular backups of your important files and data to an external hard drive, network storage, or a cloud-based service. Ensure your backups are secure and not directly accessible from the system being backed up.

Use Strong Passwords and Two-Factor Authentication (2FA): Strengthen your security by using strong, unique passwords for all accounts and enable two-factor authentication (2FA) wherever possible to add an extra layer of protection.