McAfee is receiving requests for information regarding the Maze ransomware. This article provides information about this ransomware and recommendations to help protect your environment.

This article will be updated as more information becomes available.



Maze ransomware was first discovered in May 2019. The ransomware is distributed by threat actor TA2101 in several ways. When it is deployed, the ransomware scans all folders and encrypts all files except itself and .ini file extensions, and creates a ransom note in each folder. The ransom amount is not stated in the ransom note. Victims are directed to email the threat actor at one of two email addresses. Currently, there is no known publicly available decryptor.