Oxva Ransomware

The Oxva Ransomware targets the data of its victims and locks it via an uncrackable cryptographic algorithm. In the vast majority of cases, ransomware threats are used in financially-motivated attack operations. The cybercriminals seek to extort money from the affected individual users or corporate entities by promising assistance with the restoration of the encrypted files, but only after being paid a certain ransom amount.

When it comes to the Oxva Ransomware, in particular, infosec researchers have confirmed that it belongs to the STOP/Djvu malware family. When the threat encrypts a file, it also appends '.oxva' to the file's original name. Victims will notice that the threat has created a new text file on the infected devices. The file is typically named '_readme.txt' and its role is to deliver a ransom note with instructions to the impacted users or companies.

The Oxva Ransomware's message indicates that the threat mostly targets individual users. Its operators demand to be paid exactly $980, after which they will supposedly send a decryptor tool and the required decryption keys to their victims. Users who initiate communication with the hackers within the first 72 hours are promised a discount of 50%. According to the ransom note, two email addresses (restorealldata@firemail.cc and gorentos@bitmessage.ch), as well as a Telegram account (@datarestore), can be used for this purpose.

The full text of the ransom note is:

'ATTENTION!

Don't worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-WbgTMF1Jmw
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
restorealldata@firemail.cc

Reserve e-mail address to contact us:
gorentos@bitmessage.ch

Our Telegram account:
@datarestore

Your personal ID:'