We're receiving requests for information regarding the Maze ransomware. This article provides information about this ransomware and recommendations to help protect your environment.
This article will be updated as more information becomes available.
To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.
Maze ransomware was first discovered in May 2019. The ransomware is distributed by threat actor TA2101 in several ways. When it's deployed, the ransomware scans all folders and encrypts all files except itself and
.ini file extensions, and creates a ransom note in each folder. The ransom amount isn't stated in the ransom note. Victims are directed to email the threat actor at one of two email addresses. Currently, there's no known publicly available decryptor.
