Jump to content

.NBES extension ransomware


Recommended Posts

Hi yesterday my laptop and external hard disk got infected my .nbes extension ransomware. All my backed up data in external drive has been encrypted. Could anyone please let me know what can be done and how to decrypt all my files and folders in my external hard disk drive ? please help.

Link to post
Share on other sites

This is new variant of STOP Ransomware

Check your personal ID on the ransom note.

The signs "t1" at the end of the ID can indicate that in the future the files can be decrypted if the developers receive a decryption key. Today, this is the newest variant, and no one has yet announced that they bought the key from extortionists to pass it to the developers, so that they complement its in decryptor.

Link to post
Share on other sites
On 12/17/2019 at 2:47 AM, Amigo-A said:

This is new variant of STOP Ransomware

Check your personal ID on the ransom note.

The signs "t1" at the end of the ID can indicate that in the future the files can be decrypted if the developers receive a decryption key. Today, this is the newest variant, and no one has yet announced that they bought the key from extortionists to pass it to the developers, so that they complement its in decryptor.

Hi Amigo

Any update on the decrypt tool ? Extension .nbes supported by the decrypt tool ?

Link to post
Share on other sites
1 minute ago, Rohith said:

.nbes now supported by the tool ? 

It always was. Nothing about the encryption format changes from extension to extension with STOP/Djvu, so the decrypter doesn't need updated.

The issue is the type of encrypting they've been using for the past few months is secure, meaning we can't break it. Without private keys, decryption is impossible.

Link to post
Share on other sites
3 minutes ago, GT500 said:

It always was. Nothing about the encryption format changes from extension to extension with STOP/Djvu, so the decrypter doesn't need updated.

The issue is the type of encrypting they've been using for the past few months is secure, meaning we can't break it. Without private keys, decryption is impossible.

i hope the decrytor tool soon supports .nbes extension files encrypted with offline keys ending with "t1"

waiting for it..

Link to post
Share on other sites
Just now, Rohith said:

i hope the decrytor tool soon supports .nbes extension files encrypted with offline keys ending with "t1"

waiting for it..

I recommend running the tool once every week or two. We just need to find the private key for offline ID's for .nbes and add it to our database, and then the decrypter will be able to use it, so once that happens it will be able to decrypt your files.

Link to post
Share on other sites
5 minutes ago, GT500 said:

I recommend running the tool once every week or two. We just need to find the private key for offline ID's for .nbes and add it to our database, and then the decrypter will be able to use it, so once that happens it will be able to decrypt your files.

Alright... Noted.

Link to post
Share on other sites
  • 5 weeks later...
  • 2 weeks later...
On 1/31/2020 at 11:14 PM, Rohith said:

my id is offline id.. it ends with "t1"

The private key for the offline ID from .nbes has been added to our database, so if your files really do have an offline ID then the decrypter should be able to decrypt your files.

Link to post
Share on other sites
21 minutes ago, GT500 said:

The private key for the offline ID from .nbes has been added to our database, so if your files really do have an offline ID then the decrypter should be able to decrypt your files.

Hi support team.. I was able to decrypt all my files almost 600 GB using the tool. I have successfully decrypted my external hard disk drive day before yesterday. Thank you so much for adding the private key for the offline ID for .nbes extension files.

Link to post
Share on other sites
22 hours ago, Rohith said:

Hi support team.. I was able to decrypt all my files almost 600 GB using the tool. I have successfully decrypted my external hard disk drive day before yesterday. Thank you so much for adding the private key for the offline ID for .nbes extension files.

That's great to hear. Thanks for letting us know.

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...