Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Ransom Notes:

IOC

Hello [snip],

Your network was hacked and encrypted.

No free decryption software is available on the web.

Email us at SARAH.BARRICK@PROTONMAIL.COM, MARY.SWANN@PROTONMAIL.COM, Ashley.Mowat@protonmail.com 
(or) LINDA.HARTLEY@TUTANOTA.COM, HENRY.PROWSE@TUTANOTA.COM, Shane.Gilles@tutanota.com 
to get the ransom amount.

Please, use your company name as the email subject.

TAIL:[snip]

KEY:[snip]

Indicators of Compromise
Type IOC
email SARAH.BARRICK@PROTONMAIL.COM
email MARY.SWANN@PROTONMAIL.COM
email Ashley.Mowat@protonmail.com
email LINDA.HARTLEY@TUTANOTA.COM
email HENRY.PROWSE@TUTANOTA.COM
email Shane.Gilles@tutanota.com