Wizard Ransomware

The Wizard Ransomware is a damaging threat created specifically to target the data on the infected devices. Ransomware threats are typically equipped with an uncrackable encryption process, leaving any of the impacted documents, photos, PDFs, archives, databases, etc., completely unusable. Victims are then extorted for money, as restoration of the data without the decryption keys that the hackers possess is practically impossible.

The Wizard Ransomware appends '.wizard' to the names of the encrypted files. It also drops a text file named 'decrypt_instructions.txt' on the desktop of the breached systems. The file contains a ransom note detailing the demands of the attackers. In this case, victims are told that they will need to pay a $100 ransom to the hackers. The money must be sent using the Bitcoin cryptocurrency. The note mentions a single email - 'godepso19@proton.me,' address that could be used as a way to contact the cybercriminals

The full ransom note left by Wizard Ransomware is:

'Welcome to Wizard Ransomware…

karolisliucveikis, here's what happened…
All files are encrypted with Advanced Encryption Standard 256.
Maybe you noticed something? Your documents are now unreadable and corrupted.
You can wonder how to decrypt it, but… No chance of that, sorry.

So, what can you do now?

You only have one option to decrypt your files, lets see…
If you want your important files back you will need $100 in Bitcoin.
However, we are able to discuss this price, maybe we can talk it down, we aren't evil.
Want to start the process? You should e-mail us at: godepso19@proton.me
Include your ID in the e-mail, your ID is:

What if I don't pay?

Nothing, meaning your files will just be encrypted forever… Bad outcome, right?
However, we recommend you be quick, because our operations get shut down fast.

Have fun, we're out…
Sincerely, Wizard Ransomware.'