The STOP Puma ransomware encrypts victim's files and appends the extension ".puma", ".pumas", or ".pumax" to files. Other supported extensions also include ".INFOWAIT" and ".DATAWAIT".
The ransom note "!readme.txt" contains the following text:
==================================!ATTENTION PLEASE!===========================================
Your databases, files, photos, documents and other important files are encrypted and have the extension: .puma
The only method of recovering files is to purchase an decrypt software and unique private key.
After purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.
Only we can give you this key and only we can recover your files.
You need to contact us by e-mail [email protected] send us your personal ID and wait for further instructions.
For you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.
Discount 50% avaliable if you contact us first 72 hours.
===============================================================================================
E-mail address to contact us:
[email protected]
Reserve e-mail address to contact us:
[email protected]
Your personal id:
0056se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0