Powz Ransomware

The Powz Ransomware is designed to scan infected systems for targeted file types and then encrypt them with an uncrackable cryptographic algorithm. The goal of the threat's operators is to use the locked data to extort the victims for hefty ransom payments. This specific ransomware threat is not unique, as analysis has revealed that it is a variant of the STOP/Djvu malware family. This fact doesn't mean that it is any less destructive, though.

When executed on the victim's device, the Powz Ransomware will encrypt the stored data and append the original name of each affected file with '.powz.' The ransom note containing instructions from the threat actors will then be dropped on the system. The message will be delivered as a text file named '_readme.txt.'

Opening the file and reading the note shows that the Powz Ransomware message is almost entirely identical to the ones left by the other STOP/Djvu variants. The attackers state that victims must pay a ransom of $980 if they want to receive a decryption tool and the necessary decryption keys. That initial ransom amount, however, may be reduced by 50% if victims initiate communication with the threat actors within the first 72 hours. They also can send one file to be decrypted for free, as a demonstration of the hackers' ability to restore the impacted data.

The full text of the note is:

'ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-oTIha7SI4s
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
support@fishmail.top

Reserve e-mail address to contact us:
datarestorehelp@airmail.cc

Your personal ID:'

Powz Ransomware Video

Tip: Turn your sound ON and watch the video in Full Screen mode.