DesuCrypt is an open-source ransomware project from which a new ransomware family has been created. At the time of writing, desuCrypt is being used to distribute two variants: Insane and Deuscrypt. The Insane variant appends firstname.lastname@example.org to the names of encrypted files and drops a ransom note named How_decrypt_files.txt. Deuscrypt ransomware appends .email@example.com.DEUSCRYPT. and drops a ransom note named note.txt. Both display a console window throughout the encryption process. Although both variants' ransom notes provide an email address to contact for ransom payment instructions, the amount of the ransom payment is not included and is currently unknown. Associated email addresses include firstname.lastname@example.org and email@example.com.
2/12/2018: A new variant appends .Tornado to the names of encrypted files and creates a ransom note named key.txt.d BLOG.
- Bleeping Computer provides additional information on desuCrypt here.
- Bleeping Computer provides a free decryption tool for the Insane and Desucrypt ransomware variants, available here.
Image Source: Bleeping Computer