NEW RANSOMWARE

[skramz88 0]

There's a new ransomware that uses a .zwer file extension. Hope you can do something about this. Thanks in advance.

Attached below is the ransom note._readme.txt

Edited June 8, 2020 by skramz88
file attachment

[stapp 160]

So that the experts can look at it, can you attach a ransom note _readme.txt to your message. Do not edit anything.

[skramz88 0]

Here is the ransom note.

_readme.txt

[Amigo-A 142]

Quote

.zwer

This is new variant of STOP Ransomware

Only some decryption keys are currently added to Emsisoft Decryptor. There is no key for this variant yet.

[skramz88 0]

2 hours ago, Amigo-A said:

This is new variant of STOP Ransomware

Only some decryption keys are currently added to Emsisoft Decryptor. There is no key for this variant yet.

Thank you. How long do you think it will take in developing a key?

[stapp 160]

31 minutes ago, skramz88 said:

Thank you. How long do you think it will take in developing a key?

Have a read here

https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

 

[skramz88 0]

37 minutes ago, stapp said:

Have a read here

https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

 

Read it. It seems nothing can be done and my files are as good as buried treasure. I hope it won't take years until they can be decrypted tho.

Thank you for the information!

[GT500 886]

17 hours ago, skramz88 said:

Read it. It seems nothing can be done and my files are as good as buried treasure. I hope it won't take years until they can be decrypted tho.

That's essentially correct. We'd need the private key for your ID to be able to decrypt your files, however only the criminals have access to the private keys, so there's really nothing we can do until those private keys get released publicly.