Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Ransom Notes:

IOC

--------------------------------------------------------------------------
HELLO dear Management

If you are reading this message, it means that:
- your network infrastructure has been compromised,
- critical data was leaked,
- files are encrypted,
- backups are deleted

------------------------------------------------------

by D A R K A N G E L S T E A M

The best and only thing you can do is to contact us
to settle the matter before any losses occurs.

1. THE FOLLOWING IS STRICTLY FORBIDDEN

1.1 EDITING FILES ON HDD.
Renaming, copying or moving any files
could DAMAGE the cipher and
decryption will be impossible.

1.2 USING THIRD-PARTY SOFTWARE.
Trying to recover with any software
can also break the cipher and
file recovery will become a problem.

1.3 SHUTDOWN OR RESTART THE PC.
Boot and recovery errors can also damage the cipher.
Sorry about that, but doing so is entirely at your own risk.




 2. TO DO LIST (best practies)
- Contact us as soon as possible.
- Contact us only in our live chat, otherwise you can run into scammers.
- Purchase our decryption tool and decrypt your files. There is no other way to do this.
- Realize that dealing with us is the shortest way to success and secrecy.
- Give up the idea of using decryption help programs, otherwise you will destroy the system permanently.
- Avoid any third-party negotiators and recovery groups. They can become the source of leaks.

3. POSSIBLE DECISIONS

3.1 NOT MAKING THE DEAL
- After 4 days starting tomorrow your leaked data will be Disclosed or sold.
- We will also send the data to all interested supervisory organizations and the media.
- Decryption key will be deleted permanently and recovery will be impossible.
- Losses from the situation can be measured based on your annual budget.

3.2 MAKING THE WIN-WIN DEAL
- You will get the only working Decryption Tool and the how-to-use Manual.
- You will get our guarantees (with log provided) of non-recovarable deletion of all your leaked data.
- You will get our guarantees of secrecy and removal of all traces related to the deal in the Internet.
- You will get our security report on how to fix your security breaches.
- You will get our Advanced Penetration Test Report about your security.
- We guarantee the removal of all backdoors in your network

4. HOW TO CONTACT US

4.1 Download and install TOX or Session
TOX Download Link:https://tox.chat/download.html
Session  Download Link:https://getsession.org/

4.2 Add Us on Tox or Session:
Tox ID:EB66AAB860C618A4998118BC352BED9C9537EB3D7AC9BE1FFE548F68D921BB51A14BB177D99A
Session ID:056645f3ef148be3d6b782581cfd89100b8287d20cb13a9ad02f34982930d36346

Backup Email:
inform-hack@proton.me
infrom-test@proton.me


4.3 You id is [snip]
4.4 In case network is restricted in your area use VPN services.
4.5 All leaked Data will be Disclosed in 4 Days if you remain silent.

Indicators of Compromise
Type IOC
email inform-hack@proton.me
email infrom-test@proton.me
tox id EB66AAB860C618A4998118BC352BED9C9537EB3D7AC9BE1FFE548F68D921BB51A14BB177D99A
session id 056645f3ef148be3d6b782581cfd89100b8287d20cb13a9ad02f34982930d36346