Bowd Ransomware

The Bowd Ransomware is a hurtful tool that can be used in attack operations that target the victims' data. Indeed, the threat is equipped with a strong encryption algorithm that can leave most of the data on the breached devices in an unusable state. Affected users or corporate entities will lose access to their documents, photos, images, archives, databases and many other file types. Even though the Bowd Ransomware is a variant of the infamous STOP/Djuv malware strain, its destructive potential should not be underestimated.

Victims will notice that all of the impacted files now have '.bowd' appended to their original names. The threat also will create a text file named '_readme.txt'. Inside this file is a ransom note with instructions from the hackers. According to the message, the threat actors are financially motivated - their main goal is to extort money from their victims in exchange for providing assistance with the restoration of the encrypted file. Victims should be warned that infosec researchers have observed operators of STOP/Djvu threats dropping additional malware on the infected devices. The dropped malware may include info-stealers such as the Vidar Stealer and the RedLine Stealer.

The ransom note contains the usual offer to decrease the original amount of ransom by 50% - from $980 to $490 if the affected users establish contact within the first 72 hours. Victims can apparently pick and send one file to be decrypted for free. However, the file must not contain any important data. The two email addresses found in the ransom note are 'support@fishmail.top' and 'datarestorehelp@airmail.cc.'

The full text of Bowd Ransomware's message is:

'ATTENTION!

Don’t worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-oTIha7SI4s
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that’s price for you is $490.
Please note that you’ll never restore your data without payment.
Check your e-mail “Spam” or “Junk” folder if you don’t get answer more than 6 hours.

To get this software you need write on our e-mail:
support@fishmail.top

Reserve e-mail address to contact us:
datarestorehelp@airmail.cc'