Azov Ransomware
The Azov Ransomware has been used by evil-minded threat actors to lock the data of their victims. Unlike the vast majority of ransomware threats, Azov's operators do not appear to be financially motivated, as evidenced by the message dropped by the threat. Analysis of the Azov Ransomware attack chain has revealed that the threat actors utilized the SmokeLoader botnet to spread the threat. In addition, victims should be warned that additional, threatening payloads, such as the RedLine Stealer and the STOP/Djvu Ransomware variants, could have been dropped on the breached device, alongside the Azov Ransomware.
When executed on the victim's computer, the threatening tool will target a vast range of file types and encrypt their data. However, the threat will leave any .ini, .dll., and .exe files intact, likely to avoid causing any critical system errors. Each encrypted file will have '.azov' appended to its original name. The ransom note containing the message of the attackers will be dropped as a text file named 'RESTORE_FILES.txt' in each folder scanned by the Azov Ransomware.
In the text message, the hackers try to frame several prominent cybersecurity researchers as part of the Azov Ransomware's operators. The threat actors give the Twitter accounts of the researchers and cybersecurity organizations, but fail to provide any way for the victims to contact them. As a result, there is no viable way to decrypt the files on the affected computers.
The full text of the ransom note delivered by the Azov Ransomware:
'!Azov ransomware!
Hello, my name is hasherezade.
I am the polish security expert.
To recover your files contact us in twitter:
@hasherezade
@VK_Intel
@demonslay335
@malwrhunterteam
@bleepincomputer
Слава Україні #Вцебудеукраїна
[Why did you do this to my files?]
I had to do this to bring your attention to the problem
Do not be so ignorant as we were ignoring Crimea seizure for years.
The reason the west doesn't help enough Ukraine.
Their only help is weapons, but no movements towards the peace!
Stop the war, go to the streets!
Since when that Z-army will be near to my Polska country.
The only outcome is nuclear war.
Change the future now!
Help Ukraine, come to the streets!
We want our children to live in the peaceful world.
ВцебудеУкраїна
Biden doesn't want help Ukraine.
You people of United States, come to the streets, make revolution!
Keep America great!
Germany plays against their own people!
Du! Ein mann aus Deutschland, kom doch, komm raus!
Das ist aber eine Katastrophe, was Biden zu ihnen gemacht hat.
Wie war das schoen, wenn Merkel war da?
TaiwanIsChina'
