Youhau ransomware

Youhau belongs to the VoidCrypt family. It renames files to carry a victim ID in square brackets, a contact address in parentheses and the .youhau suffix, then writes Dectryption-guide.txt. Its note asks victims to return a key file kept in C:/ProgramData with a test file. No data theft or leak site has been reported.

Sources: In-house research

File extensions: .youhau

Decryptor: Decryptor availability has not been recorded.