Ransomware

STOP/Djvu

First seen: 2018-12 • Status: active

Currently Active Threat

STOP/Djvu is the most common ransomware attacking regular people. It usually comes from downloading cracked software.

Overview

STOP/Djvu is the most common ransomware targeting home users. It spreads through cracked software and has hundreds of variants.

Also Known As

STOP Ransomware, Djvu

How It Spreads

  • Cracked software
  • Fake downloads
  • Bundled installers

What It Does

  • File encryption
  • Targets home users

Is your business exposed?

Target Platforms

Windows

Detection Tips

  • Avoid cracked software
  • Monitor for STOP variants

MITRE ATT&CK Techniques

T1486

If You're Infected

  1. 1.

    Check for free decryptor at Emsisoft

  2. 2.

    Many variants can be decrypted

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required