Xorist勒索病毒家族详情_360社区 - Powered by Discuz! Archiver

Potato 发表于 2021-4-8 19:30

家族：Xorist
特征数据：MailRU

Potato 发表于 2021-4-12 19:51

家族：Xorist
特征数据：emilisub

Potato 发表于 2021-4-12 19:51

家族：Xorist
被加密文件后缀:emilisub
黑客邮箱/Url：bufalo@boximail.com

Potato 发表于 2021-4-12 19:51

家族：Xorist
被加密文件后缀:emilisub
黑客邮箱/Url：3QgJDoVEaksAs9kFz1vcueG8DKF4hPrARW

Potato 发表于 2021-4-12 19:51

家族：Xorist
特征数据：greed

Potato 发表于 2021-4-12 19:51

家族：Xorist
特征数据：MailRU

Potato 发表于 2021-4-26 10:42

家族：Xorist
特征数据：oplatabtc3@gmail.com

Potato 发表于 2021-5-26 15:17

家族：Xorist
特征数据：16U6beEuJXMsnVoz2LwdnyypCLY6JwgyRx

Potato 发表于 2021-5-26 15:17

家族：Xorist
特征数据：xinoxix@tuta.io

Potato 发表于 2021-6-3 10:33

家族：Xorist
特征数据：private

Potato 发表于 2021-6-3 10:33

家族：Xorist
被加密文件后缀:private
黑客邮箱/Url：lilmoonhack7766@protonmail.ch

Potato 发表于 2021-6-3 19:03

家族：Xorist
特征数据：Email_Decryptor_Payment@scryptmail.com

Potato 发表于 2021-6-3 19:03

家族：Xorist
特征数据：Decryptor_Payment@scryptmail.com

Potato 发表于 2021-6-3 19:03

家族：Xorist
特征数据：anonymous

Potato 发表于 2021-6-9 19:01

家族：Xorist
被加密文件后缀:ZuCaNo.TuTa
黑客邮箱/Url：zucano@tuta.io

Potato 发表于 2021-6-9 19:01

家族：Xorist
特征数据：ZuCaNo.TuTa

Potato 发表于 2021-6-11 10:15

家族：Xorist
特征数据：Ransomware KillDisk 2017 zaplat

Potato 发表于 2021-6-17 15:17

家族：Xorist
特征数据：Ransomware KillDisk 2017 zaplat

Potato 发表于 2021-7-23 14:56

家族：Xorist
特征数据：matafaka

Potato 发表于 2021-8-6 21:59

家族：Xorist
特征数据：Divinity

Potato 发表于 2021-8-6 21:59

家族：Xorist
特征数据：@lulzed

Potato 发表于 2021-8-6 21:59

家族：Xorist
特征数据：@dissimilate

Potato 发表于 2023-1-31 16:41

家族：Xorist
特征数据：bc1q73lm30rgv6h9wy42y88t0r8prjh9l9pzpvvm9c

Potato 发表于 2023-12-13 10:32

Hello

All your files have been encrypted
if you want to decrypt them you have to pay me 0.045 bitcoin.

Make sure you send the 0.045 bitcoins to this address:
bc1qygn239pmpswtge00x60ultpp6wymht64ggf5mk

If you don't own bitcoin, you can easily buy it from these sites:
www.coinmama.com
www.bitpanda.com
www.localbitcoins.com
www.paxful.com

You can find a larger list here:
https://bitcoin.org/en/exchanges

After sending the bitcoin, contact me at this email address:
protonis2023@tuta.io with this subject: PROTONIS0045-ID-PC8391923
After the payment has been confirmed,
you will get decryptor and decryption keys!

You will also receive information on how to defend against another ransomware attack
and the most important thing is your security hole through which we entered.

Attention!
Do not try other cheaper decryption options because nobody and nothing can
decrypt your files without the keys generated for your server,
you will lose time, money and your files forever!

Potato 发表于 2023-12-13 14:02

Hello

All your files have been encrypted
if you want to decrypt them you have to pay me 0.04 bitcoin.

Make sure you send the 0.04 bitcoins to this address:
bc1q8k2z7u5s9mx0jzcvtfmawg33drhuev5dj6uds7

If you do not own bitcoin, you can easily buy it from this sites:
www.coinmama.com
www.bitpanda.com
www.localbitcoins.com
www.paxful.com

You can find a larger list here:
https://bitcoin.org/en/exchanges

After you have sent the bitcoin contact me at one of these email addresses:
protix@tuta.io or protix@skiff.com with this subject: ID-PRo04-TiXKey777301022

After the payment has been confirmed,
you will receive the decryptor and the keys for decryption!

You will also receive information on how to defend yourself against another ransomware attack
and the most important thing that is your security hole through which i entered.