Azov Ransomware, pirated software, keygens (programs for generating activation keys) etc. It has been actively spreading for about two weeks. Bleeping Computer founder and IT researcher Lawrence Abrams was the first to talk about the virus.

what is known

• In the ransom note, the attackers claim that the malicious file was created by a Polish IT professional known as Hasherazade.
• To restore files, victims are advised to contact other well-known experts on Twitter: Lawrence Abrams, Bleeping Computer, Hasherazade, MalwareHunterTeam, Michael Gillespie or Vitaly Kremez.
• Also in your message The attackers reported that Azov was created as a sign of protest against the annexation of Crimea by Russia and because Western countries did not adequately support Ukraine. in connection with the Russian occupation. It is alleged that the developers are trying to attract attention in this way.
• The file also includes the hashtag #Vsebudeukraina and “Glory to Ukraine!” You can also find the expression.
• Bleeping Computer reports that at least one Ukrainian organization has been attacked by this malware, but the text clearly states that the virus allegedly targets the US and Germany, which it accuses of inaction.

Note that attackers have added to their virus/Photos by Bleeping Computer.

Unfortunately, the note does not provide actual ways to communicate with encryption operators. Abrams summarizes that due to the lack of opportunity to contact attackers to pay the ransom, this malware should not be considered a ransomware, but a deliberately destructive wiper (wipe, from English).

As victims began contacting Bleeping Computer for assistance in recovering files, Abrams stresses that unfortunately he and other experts do not yet know how to recover data and cannot help.