Taqw Ransomware Will Encrypt Victim Files

If your images, documents, or files are inaccessible and bear the ".Taqw" extension, it indicates that your computer has been contaminated with the STOP/Djvu ransomware. This malicious software encrypts personal documents on the victim's machine, adding the ".Taqw" extension. Subsequently, a message appears, proposing data decryption upon the payment of Bitcoin. These instructions are presented in the " _readme.txt" document on the victim's desktop.

Taqw functions as a ransomware strain that encrypts files such as documents, images, and videos by appending the ".Taqw" extension. It then endeavors to extract money from victims by demanding a ransom in Bitcoin in exchange for file access.

Upon initial infection by Taqw ransomware, the program scans the computer for significant documents, images, and essential productivity files (e.g., .doc, .docx, .xls, .pdf). After identification, these files are encrypted and their extensions altered to ".Taqw," effectively preventing their opening.

Upon encrypting the computer's files, the Taqw ransomware displays the " _readme.txt" file, containing a ransom note and instructions for reaching the creators of the ransomware. Victims are instructed to contact these malicious actors via the email addresses support@fishmail.top and datarestorehelp@airmail.cc.

Taqw Ransom Note Copies Djvu Template

The complete text of the ransom note generated by Taqw reads as follows:

ATTENTION!

Don’t worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-oTIha7SI4s
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that’s price for you is $490.
Please note that you’ll never restore your data without payment.
Check your e-mail “Spam” or “Junk” folder if you don’t get answer more than 6 hours.

To get this software you need write on our e-mail:
support@fishmail.top

Reserve e-mail address to contact us:
datarestorehelp@airmail.cc

How Can You Protect Your Valuable Data from Ransomware?

Protecting your valuable data from ransomware requires a combination of preventive measures and good cybersecurity practices. Here are steps you can take to safeguard your data:

Regular Backups: Regularly back up your important data to an external hard drive, a network-attached storage (NAS) device, or a secure cloud storage service. Ensure your backups are disconnected from the network after each backup to prevent them from being compromised in case of an attack.

Use Reliable Security Software: Install reputable antivirus and anti-malware software and keep them up to date. These programs can help detect and block ransomware before it can execute on your system.

Update Software and Operating Systems: Regularly update your operating system, software applications, and plugins. Software updates often include patches for known vulnerabilities that ransomware might exploit.

Enable Pop-Up Blockers: Pop-up blockers in web browsers can prevent malicious ads and pop-ups that might lead to ransomware infections.

Be Cautious with Email: Avoid opening attachments or clicking on links in emails from unknown or suspicious sources. Be cautious even if the sender seems familiar, as attackers can spoof email addresses.

Verify Links and Email Addresses: Hover over links in emails to see the actual URL before clicking. Check the email address of the sender to ensure it's legitimate.

Disable Macros: Disable macros in Microsoft Office files, as ransomware often spreads through malicious macros embedded in documents.