What is the Bpws Ransomware?

Bpws is a ransomware variant that belongs to the sizable Djvu family of clones.

Bpws was spotted by security researchers in early January 2023. The ransomware does practically nothing differently from the other clones in its family.

The Bpws ransomware will encrypt almost every file on the victim system, leaving the file contents scrambled and unreadable. Encrypted files include media, document, archive and database extensions.

Encrypted files receive the ".bpws" extension after their old one. This process will turn a file named "image.png" into "image.png.bpws".

Once the encryption process completes, the ransomware drops its ransom demands inside a plain text file with the name "_readme.txt". The contents of the ransom note follow the usual template, shared among all Djvu clones. The full ransom note reads as follows:

ATTENTION!

Don't worry, you can return all your files!

All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.

The only method of recovering files is to purchase decrypt tool and unique key for you.

This software will decrypt all your encrypted files.

What guarantees you have?

You can send one of your encrypted file from your PC and we decrypt it for free.

But we can decrypt only 1 file for free. File must not contain valuable information.

You can get and look video overview decrypt tool:

hxxps://we.tl/t-WbgTMF1Jmw

Price of private key and decrypt software is $980.

Discount 50% available if you contact us first 72 hours, that's price for you is $490.

Please note that you'll never restore your data without payment.

Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:

restorealldata@firemail.cc

Reserve e-mail address to contact us:

gorentos@bitmessage.ch

Our Telegram account:

@datarestore

Your personal ID: