Vassago Ransomware

The Vassago Ransomware is a file-encryption Trojan based on the source code of another very active ransomware family, the Makop Ransomware. Sadly, this means it uses a flawless file-locking mechanism, which cannot be reversed with the use of free decryption software. The only working decryptor is likely to be in the hands of Vassago Ransomware's creators. But they will not give it to you for free – instead, they ask to be paid a ransom sum via Bitcoin in exchange for their help.

The Vassago Ransomware may be spread online via corrupted email attachments, fake downloads, corrupted advertisements or pirated media and software. It is recommended to be careful with the files you download from the Internet, and never trust data coming from unknown sources. You also should add a layer of defense by installing a reputable anti-virus product.

If the Vassago Ransomware's attack succeeds, it will encrypt many files, which will be easy-to-spot because of the extension appended to their name – '.[<VICTIM ID>].[vassageo_0203@tutanota.com].vassago.' The final change that the Vassago Ransomware does to compromised systems is to drop the ransom note 'readme-warning.txt.'

The criminals ask to be contacted via the emails vassago_0203@tutanota.com and vassago0203@cock.li. You should only get in touch with them because they offer to unlock two files for free – even if they return the files decrypted, you should not consider paying for the full decryption service. The best course of action is to run an anti-virus scanner to terminate the ransomware, and then experiment with the best data recovery tools available online.