Author: Aleksei A

What is Boza ransomware?

Boza is a new virus in the ransomware group. After infecting a computer, it encrypts all files it can find, and demands money for decryption.
Boza is a strain of STOP/Djvu, a large ransomware family. It contains many viruses, all very similar to this one, like Kifr and Torm.
These viruses resemble each other to such a great extent that the only way to identify Boza ransomware is to look at the file extension. All STOP/Djvu strains (and most ransomware in general) rename the files they encrypted. In our case, the files are given .boza file extension, unique to this virus.
Another important part of the Boza virus is its ransom note, “_readme.txt”. In this note, the hackers mention how much money they want: 980 US dollars. There is a 50% discount for victims who pay within three days, bringing the price down to $490. But even with this discount, decryption is expensive.
Thankfully, there are some ways to get around this. It is possible to remove Boza ransomware and decrypt .boza files without contacting and paying the hackers. Read the guide below and learn how to do it.