Skip to content

STOP

Also known as: Djvu, KeyPass

STOP Djvu Ransomware it is a ransomware which encrypts user data through AES-256 and adds one of the dozen available extensions as marker to the encrypted file's name. It is not used to encrypt the entire file but only the first 5 MB. In its original version it was able to run offline and, in that case, it used a hard-coded key which could be extracted to decrypt files.

C2 Infrastructure

Hosting/VPS100%

Last 7 days

Apr 11, 2026
C2 Hosts: 2
Apr 9, 2026
C2 Hosts: 2

Further Reading