Zfdv Ransomware
As expected, there is no shortage of new Djvu ransomware variants this week, just like the week before. The newest version of Djvu spotted in the wild is called the Zfdv ransomware, named after the extension it appends to encrypted files.
The Zfdv ransomware will scramble most commonly used file types, including documents, media files and archives. Once encrypted, files receive a new extension appendix in the form of ".zfdv". This means that a file formerly named "boat.jpg" will transform into "boat.jpg.zfdv" once it has been scrambled by the encryption process.
Once encryption is complete, the ransomware drops its ransom note inside a file named "_readme.txt". The ransom demands follow the template that is typical for Djvu clones - $490 within the first 72 hours, then doubling the ransom sum past that period of time.
The full text of the ransom note goes as follows:
ATTENTION!
Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-anHzdHdUMF
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.To get this software you need write on our e-mail:
admin at helpdata dot topReserve e-mail address to contact us:
supportsys at airmail dot ccYour personal ID:
