7even勒索软件家族详情

【家族名】
Win32/Ransom.7even
[平台]   /   [主类型]  .  [家族名]
平台类型 :  NAS
威胁类型 : Ransom
【是否支持解密】
360解密大师：暂不支持
在线解密：暂不支持
【被加密文件】
被压缩工具加密打包：


【勒索提示信息】：
文件名：Please Read Me !!!.txt
文件内容 ：
-------------------------------------------------------------------------------
Hello.
This is Quick Security.
What happened?
- Your Network was not secure.
- Your Network-Attached Storage was compromised.
What does this mean? Where are my files?
- All your data has been encrypted and moved to a special volume.
- All your important documents have been downloaded.
What can I do to recover my data?
- If you want to recover your data, you have to send 0.015 Bitcoin to this wallet address:
19LFcKzUtNmvJtwDhrH32F8DwdDc3BvdKa
Always double check the address when copy/pasting it !!!!!
- You have until the 12th of May 2024 to send the payment.
After this date the decryption will be almost impossible.
What should I do after sending the payment?
- Your ID is: xxx.xxx.xxx.xxx
- Please email us your ID and payment confirmation(txid) to:
diskstation@tutamail.com
synology@beeble.com
myds@mail2tor.com
alt.v2-4odknfr5@yopmail.com
- After we confirm your payment you will receive the password so you can decrypt all your data.
!!! Your ADMIN account was restricted for security reasons.
You can contact us to restore it !!!
Can I still use my nas?
- Do not delete any files you find on your nas.
- Do not try to recover your data using any software as it will not work.
- Do not modify any volumes or storage pools on your nas.
- Do not write large amounts of data to your disk.
- Do not restart or power on/off your synology multiple times. It will result in archive corruption!
Why have my files been downloaded?
- We reserve the right to leak or sell all your important documents, if you don't contact us. Your GDPR regulators and Customers will also be notified about the breach.
This will imply heavy fines.
Where can I buy and send bitcoin?
- You can easily buy and send bitcoin from:
https://paxful.com/buy-bitcoin
https://paybis.com/
https://www.moonpay.com/buy/btc
https://noones.com/
https://www.bybit.com/en-us/learn/crypto/buy-bitcoin/
https://www.binance.com/en/buy-Bitcoin
https://localcoinswap.com/buy/bitcoin
or Search for Bitcoin ATM's in your area.
You can think of this as a failed security audit.
We are professionals. This is a one time deal. We will decrypt a few files from your nas, as proof, if you need it.
We will send you the password immediately after the payment.
All Files, folders and subfolders will be unchanged.
We will even send you tips on how to strengthen your network security, to prevent any future attacks.
Thank you.
-------------------------------------------------------------------------------
【防护建议】
1.多台机器，不要使用相同的账号和口令
2.登录口令要有足够的长度和复杂性，并定期更换登录口令
3.重要资料的共享文件夹应设置访问权限控制，并进行定期备份
4.定期检测系统和软件中的安全漏洞，及时打上补丁。
5.定期到服务器检查是否存在异常。查看范围包括：
a)是否有新增账户
b) Guest是否被启用
c) Windows系统日志是否存在异常
d)杀毒软件是否存在异常拦截情况
6.安装安全防护软件，并确保其正常运行。
7.从正规渠道下载安装软件。
8.对不熟悉的软件，如果已经被杀毒软件拦截查杀，不要添加信任继续运行。