From 2-spyware.com
Mpal ransomware – the cryptovirus that adds .mpal extension to affected data and then displays the message with an offer to decrypt files after the cryptocurrency payment is made. Criminals that develop this virus and other versions of Djvu ransomware prefer Bitcoin cryptocurrency. Also, this family is known for releasing new versions constantly. This is achieved because not many things get changed in the coding, and other features like ransom note file _readme.txt or contact emails remain the same for a while.