VAPO Ransomware Joins the STOP/Djvu Ransomware Family
VAPO Ransomware is yet another strain of the infamous STOP/Djvu Ransomware family. Like other associated versions of the malware threat, this ransomware locks files and then demands a ransom fee to restore file access. Infections like VAPO Ransomware can be distributed via software bundles, so if you tend to download freeware or pirated apps via torrent or cracked software sites, you may end up installing such threats.
VAPO Ransomware locks most of the popular file types, including photos, music, documents, and videos. During the file encryption process, VAPO Ransomware adds the .VAPO extension to the affected files and leaves a ransom note on the user’s desktop and in every folder that contains encrypted files.
Once downloaded and installed, VAPO Ransomware will employ the AES encryption algorithm to lock up your files. Oftentimes, information stealers like ZeuS and RedLine are deployed alongside ransomware, and this allows hackers to access sensitive information before encrypting the files. Therefore, it is possible for VAPO Ransomware to employ similar tools as well.
The ransom note demands a ransom for a decryption key. The decryption key costs $980, but the ransomware’s operators will offer a 50% discount, and only charge $490, if the victim contacts them within the first 72 hours after infection.
The note also provides two email addresses: support@freshmail.top and datarestorehelp@airmail.cc, for the victims to communicate with the hackers. We discourage establishing contact with the hackers, however, as there is no guarantee that they will provide decryption tools after payment or even communicate with you.
It is important to note that VAPO Ransomware does not just encrypt data. It may also attempt to delete all shadow copies of the affected files stored on your computer. This can make your document and data recovery extremely difficult, if not impossible. It is highly recommended that you do not attempt to pay the ransom for the decryption key as this does not guarantee the recovery of the encrypted files. The best course of action in this situation is to use a file backup (provided you have one) and focus on protecting your system from similar threats.
How Do I Deal with the VAPO Ransomware Infection?
To protect yourself from the VAPO Ransomware attack, you should practice safe web browsing habits like refraining from opening email attachments from unknown senders and downloading programs from unreliable sources. You should also have a reputable malware remediation tool installed on your computer. That way, you can regularly scan for elements associated with this troublesome ransomware infection and other malware. Also, to reduce the potential damage of a future ransomware infection, please consider backing up your files on an external hard drive or cloud storage.
If you are still having trouble, consider contacting remote technical support options.
