Hello Leedarson!
Your files have been stolen from your network and encrypted with a strong algorithm. We work for money and are not associated with politics. We are not associated with LockBit although we use their reliable locker.
All you need to do is contact us and pay.
Our communication process:
1. You contact us via email or Tox.
2. We send you a list of files that were stolen
3. We decrypt 3 files to confirm that our decryptor works.
4. We agree on the amount, which must be paid using BTC.
5. We delete your files, we give you a decryptor.
6. We give you a detailed report on how we compromised your company, and recommendations on how to avoid such situations in the future.
Recommendations:
DO NOT RESET OR SHUTDOWN - files may be damaged.
DO NOT RENAME OR MOVE the encrypted and readme files.
DO NOT DELETE readme files.
Contacts:
Email: unrasolo1970@proton.me
Tox: 1C054B722BCBF41A918EF3C485712742088F5C3E81B2FDD91ADEA6BA55F4A856D90A65E99D20
* If you want to contact us via Tox you need to download it from this link: https://github.com/qTox/qTox/releases/download/v1.17.6/setup-qtox-x86_64-release.exe
YOUR ID: E309B6BED9024A5144944A84B40B7B10
If you refuse to pay or do not get in touch with us, we start publishing your files.
After 7 days the email will no longer be available, and the opportunity to receive the decryptor will also no longer be available.
YOUR NETWORK IS ENCRYPTED NOW
USE VEGtpN4krwJgWeeJ@proton.me | QSKhVaBPFv@onionmail.org TO GET THE PRICE FOR YOUR DATA
DO NOT GIVE THIS EMAIL TO 3RD PARTIES
DO NOT RENAME OR MOVE THE FILE
!!! ALL YOUR FILES ARE ENCRYPTED!!!
All your files, documents, photos, databases and other important files are encrypted.
The only way to recover your files is to get a decryptor.
To get the decryptor, write to us by mail or telegram, specify the ID of the encrypted files in the letter:
Email: decryptor@cyberfear.com
Telegram: https://t.me/decrypt_help
@decrypt_help
Warning.
* Do not rename encrypted files.
* Do not attempt to decrypt data using third party software, as this may result in permanent data loss.
* Do not contact other people, only we can help you and recover your data.
Your personal DECRYPTION ID: E5CA27CF740D121C565A398A08057B0C
############## YOUR FILES WERE ENCRYPTED##############
--
YOUR FILES ARE SAFE! ONLY MODIFIED :: AES
WE STRONGLY RECOMMEND you NOT to use any Decryption Tools.
These tools can damage your data, making recover IMPOSSIBLE.
Also we recommend you not to contact data recovery companies.
They will just contact us, buy the key and sell it to you at a higher price.
If you want to decrypt your files, you have to get RSA private key.
--
The only method of recovering files is to purchase an unique decryptor. Only we can give you this decryptor and only we can recover your files.
We guarantee that you can recover all your files safely and easily. All you.
need to do is submit the payment and purchase the decryption software.
--
OUR EMAIL ADDRESS
Q6uBdWWuu4@proton.me
quvn5llxkk@mailfence.com
JnSeYvZw34@onionmail.org
Hw2k0SZdxa@msgsafe.io
And send us your id: 31B965AB90A9B1709CD0DCA11DC488B2
--
HOW to understand that we are NOT scammers?
Before paying you can send us up to 2 files for free decryption.
The total size of files must be less than 5MB(non archived).
Files should not contain valuable information. (databases, backups, large excel sheets, etc.)
--
Please contact us within 3 days to purchase the decryption software, otherwise the price of the decryption software will be doubled.
########################################################
Your ID: D15622D73ACBA26F8D0EF1EF93002A4C
Your files has been encrypted!
>>> What's happened?
ALL YOUR FILES ARE STOLEN AND ENCRYPTED.
To recovery your data and not to allow data leakage, it is possible only through purchase of a private key from us.
>>> What guarantees?
Before paying you can send us up to 2 files for free decryption.
The total size of files must be less than 2MB(non archived).
files should not contain valuable information. (databases, backups, large excel sheets, etc.)
>>> CONTACT US:
Please write an email to all: Hw2k0SZdxa@msgsafe.io & JnSeYvZw34@onionmail.org & pGU2NJ4TQk@mail2tor.com
Write your ID in the title of your message
>>> ATTENTION!
Do not rename or modify encrypted files.
Do not try to decrypt using third party software, it may cause permanent data loss.
Decryption of your files with the help of third parties may cause increased price(they add their fee to our).
We use strong encryption, nobody can restore your files except us.
The price depends on how fast you contact with us.
remember to hurry up, within 24 hours the private key is worth $2000 USD in bitcoins (BTC), after 24 hours send an email inquiry.
All your stolen data will be loaded into cybercriminal forums/blogs if you do not pay ransom.
If you do not pay the ransom we will attack your company repeatedly again.
你的文件已经被加密了!
>> 发生了什么事？
你的所有文件都被盗并被加密。
为了恢复你的数据，不允许数据泄漏，只有通过向我们购买私人密钥才能实现。
>> 什么保证？
在付款之前，你可以向我们发送最多2个文件，以便免费解密。
文件的总大小必须小于2MB（非归档）。
文件不应包含有价值的信息。(数据库、备份、大的EXCEL表等)
>> 联系我们：
请写一封邮件给所有：Hw2k0SZdxa@msgsafe.io & JnSeYvZw34@onionmail.org & pGU2NJ4TQk@mail2tor.com
在信息的标题中写上你的ID
>> 注意!
不要重命名或修改加密的文件。
不要尝试使用第三方软件解密，这可能会导致永久性数据丢失。
在第三方的帮助下解密您的文件可能会导致价格上涨（他们在我们的基础上增加他们的费用）。
我们使用强大的加密技术，除了我们，没有人可以恢复你的文件。
价格取决于你与我们联系的速度。
记得抓紧时间，在24小时内，私人密钥价值2000美元的比特币（BTC），24小时后发送电子邮件查询。
如果你不支付赎金，你所有被盗的数据将被加载到网络犯罪的论坛/博客。
如果你不支付赎金，我们将再次反复攻击你的公司。
YOUR FILES ARE ENCRYPTED!!!
For data recovery contact us you will need to pay us:
gameovercreation@cock.li
caypishijistor29@gmx.com
1. In the first letter, indicate your personal ID!
2. In response, we will send you instructions.
>>>> Your personal DECRYPTION ID: 8FAB6E0C0F8970F7E02F65A6975F787A
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>Your personal ID: 5FF4A2AD12339428FE4A99A08B536670
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Your files has been encrypted!
>>> What's happened?
ALL YOUR FILES ARE STOLEN AND ENCRYPTED.
To recovery your data and not to allow data leakage, it is possible only through purchase of a private key from us.
>>> What guarantees?
Before paying you can send us up to 2 files for free decryption.
The total size of files must be less than 2MB(non archived).
files should not contain valuable information. (databases, backups, large excel sheets, etc.)
>>> CONTACT US:
Please write an email to all:quvn5llxkk@mailfence.com & JnSeYvZw34@onionmail.org & Q6uBdWWuu4@proton.me & Hw2k0SZdxa@msgsafe.io
Write your ID in the title of your message
>>> ATTENTION!
Do not rename or modify encrypted files.
Do not try to decrypt using third party software, it may cause permanent data loss.
Decryption of your files with the help of third parties may cause increased price(they add their fee to our).
We use strong encryption, nobody can restore your files except us.
The price depends on how fast you contact with us.
remember to hurry up, within 24 hours the private key is worth $10000 USD in bitcoins (BTC), after 24 hours send an email inquiry.
All your stolen data will be loaded into cybercriminal forums/blogs if you do not pay ransom.
If you do not pay the ransom we will attack your company repeatedly again.
你的文件已经被加密了!
>> 发生了什么事？
你的所有文件都被盗并被加密。
为了恢复你的数据，不让数据泄露，只有通过向我们购买私人密钥才能实现。
>> 什么保证？
在付款之前，你可以向我们发送最多2个文件，以便免费解密。
文件的总大小必须小于2MB（非归档）。
文件不应包含有价值的信息。(数据库、备份、大的EXCEL表等)
>> 联系我们：
请写一封邮件给所有：quvn5llxkk@mailfence.com & JnSeYvZw34@onionmail.org & Q6uBdWWuu4@proton.me & Hw2k0SZdxa@msgsafe.io
在信息的标题中写上你的ID
>> 注意!
不要重命名或修改加密的文件。
不要尝试使用第三方软件解密，这可能会导致永久性数据丢失。
在第三方的帮助下解密您的文件可能会导致价格上涨（他们在我们的基础上增加他们的费用）。
我们使用强大的加密技术，除了我们，没有人可以恢复你的文件。
价格取决于你与我们联系的速度。
记得抓紧时间，在24小时内，私人密钥价值10000美元的比特币（BTC），24小时后发送电子邮件查询。
如果你不支付赎金，你所有被盗的数据将被加载到网络犯罪的论坛/博客。
如果你不支付赎金，我们将再次反复攻击你的公司。
>> Data Leaks 133.89GB in total
嘿，我的朋友
如果你正在阅读这条信息，这意味着
- 你的网络基础设施已被破坏
- 文件被加密了
为什么会发生这种情况以及如何解决：
- 这意味着你的系统是脆弱的
- 所有加密的文件都可以被解密和恢复
- 联系我们是你解决现在问题最快的方法
有什么保证？
为了证明我们的诚意和实力，我们提供两种测试方法
1. 向我们发送电子邮件，获得解密程序，这个程序只能免费解密桌面文件
2. 你可以给我们发送2个文件（文件总大小必须小于2MB，不能是存档文件，文件中不能包含有价值的信息，如数据库、备份文件、大型EXCEL表格等），我们将免费为你解密。
联系我们：
请写一封邮件给所有：
quvn5llxkk@mailfence.com
JnSeYvZw34@onionmail.org
Q6uBdWWuu4@proton.me
Hw2k0SZdxa@msgsafe.io
在信息的标题中写上你的ID: 71DF20DAD066B54DBA12C35713BF373F
!! ALL YOUR FILES HAS BEEN ENCRYPTED !!!
You can't restore them without our encryptor.
Don't try to use any public tools, you could damage the encrypted files and lose them forever.
To make sure our encryptor works, contact us and encrypt one file for free.
Download TOX messenger: https://tox.chat/
Add friend in TOX, ID: BA7B15B33163FAA2C87040438AF6D232FC6EA3740033F2AE3EB2181C1454BD4AAE983BAF03FE All your files have been encrypted!
If you want to restore them, write us to the e-mail : ea7rt3nu0k@onionmail.org
Write this ID in the title of your message DECRYPT-ID-91EB9C54CA8850A6482AE1E3816618A8 number number In case of no answer in 48 hours write us to theese e-mails : ea7rt3nu0k@onionmail.org
You have to pay for decryption in Bitcoins.
The price depends on how fast you write to us.
After payment we will send you the decryption tool that will decrypt all your files.
Free decryption as guarantee Before paying you can send us up to 1 files for free decryption.
The total size of files must be less than 2 Mb (non archived), and files should not contain valuable information. (databases,backups, large excel sheets, etc.)
How to obtain Bitcoins The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price.
https://localbitcoins.com/buy_bitcoins
Also you can find other places to buy Bitcoins and beg 家族：Lockbit
被加密文件后缀:hqrheuhzG
黑客邮箱/Url：balloon@onionmaill.com 家族：Lockbit
被加密文件后缀:hqrheuhzG
黑客邮箱/Url：balloon@onionmaill.org 家族：Lockbit
被加密文件后缀:hqrheuhzG
黑客邮箱/Url：balloon_onion@proton.me
>>>> YOUR PC HAS BEEN LOCKED BY FLAMINGO
>>>> UNLOCK PC INSTRUCTIONS:
1. Message flamingo on telegram: @Flamingo_unlock
2. Transfer $90 in bitcoin to the given address
3. Flamingo will send the file decrypter
4. Enjoy access back to your PC
>>>> WARNING
We do NOT answer to negotiations
Any attempt to bargain will be ignored and put on block
To get your PC back you will have to pay the fee Ni hao, XXXX
Your data are stolen and encrypted.
In case of nonpayment - all information will be sold or made publicly accessible, and we will also continue to attack your servers.
Compared to other ransomware we charge a lot less, so don't be stingy!
If you pay - we will provide you with decryption software and remove your data from our servers.
We will also let you know about the vulnerability in your servers that we used to infiltrate your network.
WARNING! Do not delete or modify any files, it can lead to recovery problems!
You can contact us using Session messenger without registration and sms https://getsession.org/download
My Session ID:05839c6cce78c3f3043e7a65c27e881cbb9efbda3bab942d273a496876340b254f
You can send us any 1 file for free decryption.
Zhu ni haoyun!
你好，XXXX
您的数据已被窃取并加密。
如果不付款，所有信息都将被出售或公开，我们还会继续攻击您的服务器。
与其他勒索软件相比，我们的收费要低很多，所以不要小气！
如果您支付了赎金，我们将为您提供解密软件，并从服务器上删除您的数据。
我们还会让您知道我们利用您服务器上的漏洞来渗透您的网络。
警告！请勿删除或修改任何文件，否则会导致恢复问题！
您可以使用无需注册的会话信使和短信 https://getsession.org/download 与我们联系
我的会话 ID：05839c6cce78c3f3043e7a65c27e881cbb9efbda3bab942d273a496876340b254f
您可以将任意 1 个文件发送给我们进行免费解密。
祝您好运
########################################################################################
YOUR COMPANY NETWORK HAS BEEN PENETRATED
All your important files have been encrypted!
Your files are safe! Only modified. (RSA+AES)
ANY ATTEMPT TO RESTORE YOUR FILES WITH THIRD-PARTY SOFTWARE
WILL PERMANENTLY CORRUPT IT.
DO NOT MODIFY ENCRYPTED FILES.
DO NOT RENAME ENCRYPTED FILES.
No software available on internet can help you. We are the only ones able to
solve your problem.
We gathered highly confidential/personal data. These data are currently stored on
a private server. This server will be immediately destroyed after your payment.
If you decide to not pay, we will release your data to public or re-seller.
So you can expect your data to be publicly available in the near future..
We only seek money and our goal is not to damage your reputation or prevent
your business from running.
You will can send us 2-3 non-important files and we will decrypt it for free
to prove we are able to give your files back.
YOUR PERSONAL ID:
已编辑
Contact us, use the email:
nRF4mWpu@keemail.me
sk5olrezd@proton.me
IF YOU DON'T CONTACT US WITHIN 72 HOURS, PRICE WILL BE HIGHER.
页:
1
[2]