后缀748KobFIG无法解密

Dear Management,

If you are reading this message, it means that:
      - your network infrastructure has been compromised,
      - critical data was leaked,
      - files are encrypted
--------------------------------------------------------------------------
            The best and only thing you can do is to contact us
              to settle the matter before any losses occurs.

Email Title : 997D753504568E94786652D943D309F4

Send Email To All : quvn5llxkk@mailfence.com & JnSeYvZw34@onionmail.org & Q6uBdWWuu4@proton.me & Hw2k0SZdxa@msgsafe.io
--------------------------------------------------------------------------

                                  1. THE FOLLOWING IS STRICTLY FORBIDDEN


1.1 EDITING FILES ON HDD.   
                            Renaming, copying or moving any files
                            could DAMAGE the cipher and
                            decryption will be impossible.

1.2 USING THIRD-PARTY SOFTWARE.
                            Trying to recover with any software
                            can also break the cipher and
                            file recovery will become a problem.

1.3 SHUTDOWN OR RESTART THE PC.
                            Boot and recovery errors can also damage the cipher.
                            Sorry about that, but doing so is entirely at your own risk.


--------------------------------------------------------------------------------------------------

                                  2. EXPLANATION OF THE SITUATION
2.1 HOW DID THIS HAPPEN

The security of your IT perimeter has been compromised (it's not perfect at all).
We encrypted your workstations and servers to make the fact of the intrusion visible and to prevent you from hiding critical data leaks.
We spent a lot of time researching and finding out the most important directories of your business, your weak points.
We have already downloaded a huge amount of critical data and analyzed it. Now its fate is up to you, it will either be deleted or sold, or shared with the media.

2.2 VALUABLE DATA WE USUALLY STEAL:
                            - Databases, legal documents, personal information.
                            - Audit reports.
                            - Audit SQL database
                            - Any financial documents (Statements, invoices, accounting, transfers etc.).
                            - Work files and corporate correspondence.
                            - Any backups.
          - Confidential documents.
2.3 TO DO LIST (best practies)
                            - Contact us as soon as possible.
                            - Purchase our decryption tool and decrypt your files. There is no other way to do this.
                            - Realize that dealing with us is the shortest way to success and secrecy.
                            - Give up the idea of using decryption help programs, otherwise you will destroy the system permanently.
                            - Avoid any third-party negotiators and recovery groups. They can become the source of leaks.

--------------------------------------------------------------------------------------------------

                                  3. POSSIBLE DECISIONS
3.1 NOT MAKING THE DEAL
                            - After 4 days starting tomorrow your leaked data will be Disclosed or sold.
                            - We will also send the data to all interested supervisory organizations and the media.
                            - Decryption key will be deleted permanently and recovery will be impossible.
                            - Losses from the situation can be measured based on your annual budget.

--------------------------------------------------------------------------------------------------

                                  4. EVIDENCE OF THE LEAKAGE

我们中了同样的病毒，请问你们解决了吗

1.您中的属于LockBit3.0勒索病毒家族,暂时无法解密
2.如果文件不急需，可以备份等出解密工具。
3.如果文件急需，可以自行联系黑客(不推荐，同时存在风险)
4.若需要排查中毒原因请添加2880706404，并备注被加密文件后缀。
5.更多防护方案和付款细节请参考：https://bbs.360.cn/thread-15858154-1-1.html
6.如果您想随时关注解密情况可以直接到lesuobingdu.360.cn查询，或者填写登记表，后续如果出解密我们会通过登记进行通知：https://wenjuan.lap.360.cn/sv/59abea7ae8912
7.解密时间无法估计。若勒索病毒已知，而我们当前又无法给出技术破解方案，说明该勒索病毒的加密算法是不存在技术漏洞的。那只能等待黑客的私钥被公开或泄露，或是有其他的技术性突破。而这些都是无法做出时间上的预期的。