Tuow Ransomware

The Tuow Ransomware is a malware threat belonging to the STOP/Djvu Ransomware family. This particular malware strain has remained popular among cybercriminals for a while now, and new variants continue to be identified in the wild. As a variant from this family, the Tuow Ransomware follows the established STOP/Djvu behavior closely.

The threat runs an encryption routine on the infected systems that locks most of the data stored on them. Files, such as documents, PDFs, archives, databases, etc., will be encrypted and left in an unusable state. In addition, victims will notice that all of the impacted files now carry '.tuow' as a new file extension. A ransom note with instructions also will be dropped on the breached devices in the form of a text file named '_readme.txt.'

The instructions from the attackers state that victims are expected to pay a ransom of $980. Those who initiate communication at any point within the first 72 hours will supposedly have to pay only half of the stated ransom amount. As part of their message, victims could attach one encrypted file to be unlocked for free. The email addresses mentioned in the note as potential ways to contact the hackers are 'support@fishmail.top' and 'datarestorehelp@airmail.cc.' When dealing with cybercriminals, it is important to keep in mind that any communication could be potentially risky and could result in even worse security and privacy issues.

The full text of the ransom note is:

'ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-o7UXxOstmw
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
support@fishmail.top

Reserve e-mail address to contact us:
datarestorehelp@airmail.cc

Your personal ID:'