Maxi Ransomware

The Maxi Ransomware is a variation of the Amnesia Ransomware, a threat that has been active online for over a year. It is unlikely that the same group of criminals is behind both threats and, instead, Maxi Ransomware's operators have probably purchased the source code of the Amnesia Ransomware. Sadly, none of these file-lockers is decryptable for free, and their victims will only restore their data reliably if they have access to a backup. The attackers promise to provide a full decryption service to any victim that agrees to pay a ransom fee, but we assure you that you should not trust Maxi Ransomware's creators. Paying them is likely to cost you hundreds of dollars, and you may end up being tricked in the end.

The traits of Maxi Ransomware's attack are easy to spot. The malware will rename locked files by adding the suffix '.[maxicrypt@cock.li].maxi.' It also creates the document 'HOW TO RECOVER ENCRYPTED FILES.TXT' on the desktop. The latter document contains a message from the criminals, their demands, and their contact details. Unsurprisingly, they ask for a Bitcoin payment in exchange for a decryption tool. They also offer to unlock one file for free – you can make use of this offer by sending the file to maxicrypt@cock.li.

You should not try to pay for the decryption services of the attackers, because it is very likely that they will trick you out of your money. Instead, use an anti-virus scanner to terminate the threat, and then look into other reputable data recovery options and tools.