请使用手机微信扫码安全登录

切换账号密码登录

绑定手机号

应国家法规对于账号实名的要求,请您在进行下一步操作前,需要先完成手机绑定 (若绑定失败,请重新登录绑定)。了解更多

不绑定绑定手机号

360官网 | 360商城

推荐论坛版块活动360粉丝商城众测粉丝轰趴馆常见问题
【家族名】
Win32/Ransom.7even
[平台]   /   [主类型]  .  [家族名]
平台类型 :  NAS
威胁类型 : Ransom
【是否支持解密】
360解密大师:暂不支持
在线解密:暂不支持
【被加密文件】
被压缩工具加密打包:

360社区

360社区


【勒索提示信息】:
文件名:Please Read Me !!!.txt
文件内容 :
-------------------------------------------------------------------------------
Hello.
This is Quick Security.
What happened?
- Your Network was not secure.
- Your Network-Attached Storage was compromised.
What does this mean? Where are my files?
- All your data has been encrypted and moved to a special volume.
- All your important documents have been downloaded.
What can I do to recover my data?
- If you want to recover your data, you have to send 0.015 Bitcoin to this wallet address:
19LFcKzUtNmvJtwDhrH32F8DwdDc3BvdKa
Always double check the address when copy/pasting it !!!!!
- You have until the 12th of May 2024 to send the payment.
After this date the decryption will be almost impossible.
What should I do after sending the payment?
- Your ID is: xxx.xxx.xxx.xxx
- Please email us your ID and payment confirmation(txid) to:
diskstation@tutamail.com
synology@beeble.com
myds@mail2tor.com
alt.v2-4odknfr5@yopmail.com
- After we confirm your payment you will receive the password so you can decrypt all your data.
!!! Your ADMIN account was restricted for security reasons.
You can contact us to restore it !!!
Can I still use my nas?
- Do not delete any files you find on your nas.
- Do not try to recover your data using any software as it will not work.
- Do not modify any volumes or storage pools on your nas.
- Do not write large amounts of data to your disk.
- Do not restart or power on/off your synology multiple times. It will result in archive corruption!
Why have my files been downloaded?
- We reserve the right to leak or sell all your important documents, if you don't contact us. Your GDPR regulators and Customers will also be notified about the breach.
This will imply heavy fines.
Where can I buy and send bitcoin?
- You can easily buy and send bitcoin from:
https://paxful.com/buy-bitcoin
https://paybis.com/
https://www.moonpay.com/buy/btc
https://noones.com/
https://www.bybit.com/en-us/learn/crypto/buy-bitcoin/
https://www.binance.com/en/buy-Bitcoin
https://localcoinswap.com/buy/bitcoin
or Search for Bitcoin ATM's in your area.
You can think of this as a failed security audit.
We are professionals. This is a one time deal. We will decrypt a few files from your nas, as proof, if you need it.
We will send you the password immediately after the payment.
All Files, folders and subfolders will be unchanged.
We will even send you tips on how to strengthen your network security, to prevent any future attacks.
Thank you.
-------------------------------------------------------------------------------
【防护建议】
1.多台机器,不要使用相同的账号和口令
2.登录口令要有足够的长度和复杂性,并定期更换登录口令
3.重要资料的共享文件夹应设置访问权限控制,并进行定期备份
4.定期检测系统和软件中的安全漏洞,及时打上补丁。
5.定期到服务器检查是否存在异常。查看范围包括:
a)是否有新增账户
b) Guest是否被启用
c) Windows系统日志是否存在异常
d)杀毒软件是否存在异常拦截情况
6.安装安全防护软件,并确保其正常运行。
7.从正规渠道下载安装软件。
8.对不熟悉的软件,如果已经被杀毒软件拦截查杀,不要添加信任继续运行。




































共 0 个关于7even勒索软件家族详情的回复 最后回复于 2024-5-20 17:46

评论

直达楼层

您需要登录后才可以回帖 登录 | 注册

本版积分规则

Potato 产品答疑师

粉丝:9 关注:0 积分:11419

精华:0 金币:12133 经验:7111

IP属地: 北京市

最后登录时间:2024-6-7

私信 加好友

最新活动

【360AI浏览器&360AI搜索】公测开启

排行榜

热度排行 查看排行
今日 本周 本月 全部
    今日 本周 本月 全部

      内容推荐 热门推荐最新主帖

      扫码添加360客服号,涨知识的同时还有超多福利等你哦

      快速回复 返回顶部 返回列表