RansomwarePoland

[email protected] ransomware decrypt - cheating trickster

Recommended Posts

Hello, we are IT help for people who have been victims of encrypting a computer.

Two days ago (04.04.2019), a small company came to us in which first the computer was compromised and then an attack was made on the second computer.

Because the copy of data on the NAS was also encrypted, we advised that they would decide for themselves whether they would pay the ransom.

We have submitted, a question to [email protected] with two different IDs for the value of the ransom note and we received the answer that the ransom value is 0.5 bitcoin (2000EUR)

After payment, we were sent codes to decrypt one computer and a surcharge was requested for the next one. With discount :)

I warn you before paying ransom to these people because, if they feel that you have money, they will want more, it is also highly likely that you will not receive decryption codes from them at all.

post-1120026-0-79106500-1554548324_thumb

Witajcie, prowadzimy firmę pomagającą w przypadkach zaszyfrowania komputera. Dwa dnia temu (04.04.2019), zgłosiła się do nas mała firma w której włamano się najpierw na pierwszy komputer, a następnie z niego dokonano ataku na drugi komputer. Ponieważ kopia danych na serwerze NAS została także zaszyfrowana poradziliśmy aby samodzielnie zdecydowali o tym czy zapłacą okup.

Przesłaliśmy pytanie do [email protected] z dwoma różnymi ID komputerów jaka będzie wartość okupu i otrzymaliśmy odpowiedź, że wartość okupu to 0.5 bitcoina (2000EUR)

Po dokonaniu opłaty przesłano nam kody do odszyfrowania jednego komputera i zażądano dopłaty za kolejny.

Przestrzegam Wam przed płaceniem tym ludziom okupu ponieważ jak poczują, że macie pieniądze to będą chcieli więcej, jest także wysoce prawdopodobne, że nie otrzymacie od nich kodów deszyfrujących wcale.

 

IMG_1975.jpg
Download Image

IMG_1978.jpg
Download Image

Share this post


Link to post
Share on other sites

I recommend uploading a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with:
https://id-ransomware.malwarehunterteam.com/

You can paste a link to the results into a reply if you would like for me to review them.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.