Remove Midas Ransomware

The Midas Ransomware is an updated version of the Haron Ransomware, which was first seen in July 2021. The creators of the Midas Ransomware have not changed much apart from the extension used to mark locked files, as well as the ransom note that the threat delivers. Unfortunately, the Midas Ransomware is not considered to be compatible with free decryptor – recovering from its attack will be a tough challenge.

All files that this malware locks are marked with the extension '.newwave.' The ransom also drops two ransom notes via the files 'RESTORE_FILES_INFO.txt' and 'RESTORE_FILES_INFO.hta.' The ransom note tells users that their data has been stolen, and that their copies were encrypted permanently. They are given the option to prevent data leaks, and to get their files back, by paying a ransom fee. The exact amount of is not specified, but Midas Ransomware's creators are likely to demand tens of thousands of dollars or more. They advise victims to visit a TOR-based payment page for additional details.

This double extortion technique is becoming quite popular among ransomware creators and, unfortunately, it is making things much more complicated for victims. Even if they manage to restore their files through a backup, they would still be at risk of having their files published online. It is still a bad idea to co-operate with Midas Ransomware's operators. Paying them does not guarantee a positive outcome – they might ask for more money after the first payment is received. It is also possible that victims might not get anything in return. Complying with the demands of hackers is rarely a good idea, and you should look for alternative recovery options and solutions.