Salesrestoresoftware@firemail.cc is the email address that cybercriminals use to contact victims of ransomware, which belongs to STOP (DJVU) ransomware family. This email address is given in the message, which is in a file called ‘_readme.txt’. The ransomware drops the file ‘_readme.txt’ in every directory where there is at least one encrypted file. Attackers report that