盗版lb3 家族详情

盗版lb3

极高 高活跃
首次发现 : 2024-11-22
勒索信 : LVNxFCPE5.README.txt
算法 :
扩展名 : .NxFCPE5,.8gduxxdQN,.V3Cqb0BZh,.r4093DVPE,.YLvxCVZLU,.E6UDh76WS,.RZt8agV2T,.gTYVxOY3J,.z3TEQYIzj,.zXGC6CsPK,.bwyXXz2ue,.J1X9qDary,.DglGb5WVF,.JR0QAo2Cb,.f0M4mXmLN&SDck2DDih&Wxn2SKXCg,.PDMkZC3Cx,.lPRan59a9,.OnZmO436e,.6pHOLVMa0,.sqLNvr,.6pHOLVMa0&sqLNvr,.7njOYIUuU,.6KlErZy4d,.0SvkTHzw0,.YQgUuNGjg,.Lr4mitgxR,.CS5xHuyIl,.NQuxbxTDB,.3tU3e6Fb,.jKxWyTxpE,.gR56YTedp,.HE10TM8lb,.hBJxakwQM,.KLuFMnzNw,.BlDRhm7CA,.TS4KY9VML,.msLTP2xxW,.TrEhpHad,.YdNi219a,.dLiXPQghy

情报摘要:

别名 :
IOC数量 :
5
受害记录 :
0
ATT&CK战术 :
0

概览

加密特征

暂无加密特征数据。

勒索信

勒索信文件 : LVNxFCPE5.README.txt

>>>> YOUR DATA ENCRYPTED!!! Your files, documents, databases they are ciphered by the most reliable enciphering. It is impossible to restore files without our help. >>>> Your personal DECRYPTION ID: xxxxxxxxxxxxxxxxx >>>> WARNING! Do not DELETE or MODIFY any files,do not use recovery programs and antiviruses,it can lead to recovery problems! >>>> You will be able to restore files following the instructions: 1. To contact us by e-mail: skiffdecrypt@onionmail.com - report your ID - You can send 1-3 files, up to 1 MB in size.Files must not contain important information! not suitable files for test, .xls.xlsx.pdf.bd.mdb.sql.mdf.ldf and others. - We will decipher them and send them to you as proof - also you receive the instruction where and how many it is necessary to pay. 2. After payment, we will send you a decryptor program.You will restore all your files 3. You can be helped by a file recovery company,use multiple companies >>>> Additional mail: skiffdecrypt@mail2tor.com >>>> What are our guarantees? We are not a politically motivated group and we do not need anything other than your money. After payment, we will provide you the program for decryption. If we do not give you decrypter, then nobody will pay us in the future. Therefore to us our reputation is very important. We attack the companies worldwide and there is no dissatisfied victim after payment.

勒索信文件 : 4t9yrHZaP.README(1)(1).txt

-------------YOUR DATA IS ENCRYPTED! -------------------- >>>> Write us to the e-mail: getdataback@rambler.ru >>>> Your personal DECRYPTION ID: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx Unlocking your data is possible only with our software. Important! An attempt to decrypt it yourself or decrypt it with third-party software will result in the loss of your data forever. Contacting intermediary companies, recovery companies will create the risk of losing your data forever or being deceived by these companies. Being deceived is your responsibility! Learn the experience on the forums. --------- CONTACT US --------- >>>> Write us to the e-mail: getdataback@rambler.ru >>>> Your personal DECRYPTION ID: 恌ff? >>>> Warning! Do not DELETE or MODIFY any files, it can lead to recovery problems! >>>> Warning! If you do not pay the ransom we will attack your company repeatedly again! --------------- SCAMMER ALERT ------------------ People who you will find on the internet saying they can help you will try to scam you. Videos to youtube and other sites are fake so you shouldn't believe it. Do not pay anyone who cannot provide an example proof files. Do not forward a payment to anyone with btc apart from us. You can get your exemplary proof file for free by contacting us with your company email. Not a single file will be sent to any other email except the company one (This is a precaution in order to for you to not get scammed) Contacting any other third party or data rescue companies will create the risk of losing your data forever or you getting scammed by these firms. Getting scammed or not is up to you. Learn about the experiences of other people on the forums. >>>>>Don't be afraid to contact us. Remember, this is the only way to recover your data.<<<<<<

勒索信文件 : r4O93DVPE.README(1).txt

Ni hao! Your data are stolen and encrypted. In case of nonpayment - all information will be sold or made publicly accessible, and we will also continue to attack your servers. Compared to other ransomware we charge a lot less, so don't be stingy!:-) If you pay - we will provide you with decryption software and remove your data from our servers. We will also let you know about the vulnerability in your servers that we used to infiltrate your network. WARNING! Do not delete or modify any files, it can lead to recovery problems! You can contact us using Session messenger without registration and sms https://xxxxxxxxxxxxxxxxxxxxx My Session ID: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx You also can contact us using Tox messenger without registration and SMS https://xxxxxxxxxxxxxxxxxxxxxxxxxxx My Tox ID: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx You can also seek help from intermediaries in Data Recovery Company from China. You can send us any 1 file for free decryption. Zhu haoyun!

勒索信文件 : E6UDh76WS.README.txt

------Dear managers!------ If you are reading this, it means your network has been attacked. What does that mean? We hacked your network and now all your files, documents, client database, projects and other important data safely encrypted with reliable algorithms. we also have a copy of all your data. WARNING!!! You don't have to go to the POLICE, etc. Otherwise we will not be able to help you. You cannot acces the files right now. But do not worry. You can get it back! It is easy to recover in a few steps. As proof, we can decrypt any 3 files you provide. We are not interested to ruin your business. We want to get ransom and be happy. Please bring this information to your team leaders as soon as possible. In case of a successfull transaction, we will restore your systems within 4-6 hours and also provide security recommendations. -----------------------WARNING----------------------- If you modify files - our decrypt software won't able to recover data If you use third party software - you can damage/modify files (see item 1) You nedd cipher key / our decrypt software to restore you files. The police or authorities will not be able to help you get the cipher key. We encourage you to consider your decisions. -----------------------RECOVERY----------------------- Use email: support.lock@mailum.com (Alternate email address: suplock@mail2tor.com) You personal ID: 1802jmekds12

勒索信文件 : RZt8agV2T.README.txt

~~~All your files have been encrypted!~~~ All your files have been encrypted due to a security problem with your PC. If you want to restore them, write us to the e-mail: makesystemworkagain@mailum.com Jabber (!!!!Write only if no e-mail answer!!!!): makesystemworkagain@xmpp.jp Write YOUR PERSONAL ID xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx You have to pay for decryption in Bitcoins. The price depends on how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. Free decryption as guarantee Before paying you can send us up to 3 file for free decryption. The total size of files must be less than 1Mb (non archived), and files should not contain valuable information. (databases,backups, large excel sheets, etc.)

技术细节

暂无技术细节数据。

威胁指标

邮箱

联系方式

skiffdecrypt@mail2tor.com

来源 : 第三方捕获
首次录入 : 2024-11-22
最后更新 : 2026-10-20

邮箱

联系方式

getdataback@rambler.ru

来源 : solarA050
首次录入 : 2024-11-22
最后更新 : 2026-10-25

邮箱

联系方式

support.lock@mailum.com

来源 : solarA050
首次录入 : 2024-11-22
最后更新 : 2026-10-25

邮箱

联系方式

reopening25@gmail.com

来源 : solarA050
首次录入 : 2024-11-22
最后更新 : 2026-10-25

邮箱

联系方式

shadow533night@outlook.com

来源 : solarA050
首次录入 : 2024-11-22
最后更新 : 2026-10-25

受害者信息

暂无受害者记录。

MITRE ATT&CK

暂无 ATT&CK 矩阵数据。

处置建议

暂无处置建议。

常见行业

暂无常见行业数据。

常见入口

暂无攻击入口数据。

操作协助

把热线、演示和资料入口拆开,让应急处置、产品评估和补充阅读各自清晰

电话咨询

出现加密、停摆或勒索提示时,优先直接联系应急响应团队。

400-613-6816

预约演练

如果你在评估产品、后台和家族库能力,可以先预约一个简短演示。

预约30分钟

查看资料

把文章、工具和方案入口集中到一起,方便团队继续同步研判。

进入资料中心

5000+

服务客户

99.8%

平均恢复率

<5min

首次响应

50+

安全专家