The message states that these people must first be contacted to purchase this tool and a unique key. Files can apparently be restored by following the instructions in the 'DECRYPT-FILES.HTML' file.

The wallpaper states that Maze encrypts files with RSA-2048 and ChaCha algorithms, and the only way to restore locked/encrypted files is to purchase a decryption tool. Screenshot of files encrypted by Maze ransomware: Maze also changes the desktop wallpaper and creates the ' DECRYPT-FILES.html' file, a ransom message with instructions about how to decrypt files. Furthermore, it renames all encrypted files by adding a random extension to the filenames.įor example, ' 1.jpg' might become ' 1.jpg.ILnnD', and so on. People who have computers infected with Maze cannot access their files/data - the program encrypts files and keeps them in that state until a ransom is paid.

Registration number: 679653.Discovered by Jérôme Segura, Maze is a ransomware-type program. Registered in England and Wales 4585692.Īuthorised and regulated by the Financial Conduct Authority. Retail Finance, Maze Living are a credit broker and not a lender. Your credit agreement is provided on behalf of Maze Living by V12 Address: 20 Neptune Court, Vanguard Way, Cardiff, CF24 5PJ. Your credit agreement is provided on behalf of Maze Living by V12 Retail Finance, Maze Living are a credit broker and not a lender. Not all financial products offered are regulated by the Financial Conduct Authority. Maze Rattan Limited is authorised and regulated by the Financial Conduct Authority, registration number 934846. Registered Office: Bowden House, 36 Northampton Road, Market Harborough, LE16 9HE. This website is operated by Maze Rattan Limited (Trading as Maze Living) Maze Rattan Limited is registered in England and Wales (6830840).

Maze cleaner