Vvoo Ransomware Joins Djvu Family
Vvoo is a new ransomware variant that is part of the Djvu ransomware family.
Vvoo works by encrypting the majority of the files found on connected system drives in the victim system. Encrypted file types include media files, documents, archives and databases.
Once a file is encrypted, it receives the ".Vvoo" extension. This process will change a file's name from "archive.zip" to "archive.zip.Vvoo" upon successful encryption.
The ransomware delivers its ransom note inside a plain text file named "_readme.txt".
Table of Contents
The Vvoo ransom note
The complete text contained inside the Vvoo ransom note reads as follows:
ATTENTION!
Don't worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-WbgTMF1Jmw
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.To get this software you need write on our e-mail:
restorealldata@firemail.ccReserve e-mail address to contact us:
gorentos@bitmessage.chOur Telegram account:
@datarestoreYour personal ID:
How can you protect your sensitive files and data from ransomware similar to Vvoo?
- Regularly back up your data and store it in an external drive or cloud storage service.
- Install and regularly update antivirus software on all of your devices.
- Use strong passwords for all of your accounts, and enable two-factor authentication whenever possible.
- Be wary of suspicious emails, links, and attachments from unknown sources.
- Disable macros in Microsoft Office documents from untrusted sources.
- Keep your operating system and other software up to date with the latest security patches.
Why is it impossible to restore files that have already been encrypted by ransomware?
It is impossible to restore files that have already been encrypted by ransomware because the encryption process used by ransomware is designed to be irreversible. The encryption algorithms used by ransomware are so complex that it is virtually impossible to decrypt the data without the decryption key, which is only available from the attackers.