Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks
Readme.txt
.... Eclipse.:...
.:. :..
.:. ..: - .. :-... :.
.:. .. .:. :.
.. .:. . ... ...:. .. ...
:. :. .. ..... .. .:
.. .: - ..+******+..::::::. :. ..
.: .: -***********-::::::. :. :.
.. :. .. .=************+-:::::. :
. .. .***************+:::. -. .:
.- .. .****************. : :. .:
: .-. .. .****************. .. .-. .
.. .. -. :**************: .- .. ..
.:. : .. .=**********=. .: .. .:
.: :. ... .~++++~. .. .: :
:. .::.. ...: .:
.. :. ....:..::... .. .:
..: :.. .. .:
.-. . .-----:.. . . .
.:.. ..:.
Ransomware
--------------------------------------[ What Happened? ]----------------------------------------
Your entire network has been encrypted and your data has been stolen! And all your backups have been deleted.
We use post-quantum encryption Chacha20 + Kyber, and you won't be able to decrypt your data without our help.
To restore your network and your data, you must purchase our special decryptor program and you will be able to restore your network.
--------------------------------------[ What guarantees? ]--------------------------------------
We understand that your data is very important to you and you want to restore your work as quickly as possible.
Therefore, we can provide you with a trial decrypt of your files (3) to ensure that our decryption program can decrypt them.
IMPORTANT!!!
DO NOT ATTEMPT TO RECOVER THE FILES YOURSELF YOU WILL ONLY DAMAGE THEM, AND WE WILL NOT BE ABLE TO HELP YOU RECOVER THEM!!!
DO NOT CHANGE FILE EXTENSIONS!!!
DO NOT ATTEMPT TO USE DATA RECOVERY SERVICES, THEY WILL NOT BE ABLE TO DECRYPT YOUR FILES!!!
DO NOT TRY TO REPORT TO THE FBI, POLICE OR OTHER GOVERNMENT ORGANIZATIONS, THEY WILL NOT BE ABLE TO HELP YOU!!!
If you really want to recover your data, follow our instructions:
1) Download and install Tor Browser from this website: https://www.torproject.org/
2) Open your uniq Recovery Portal: [snip]
3) Enter the access key: [snip]
We are ready:
to provide evidence that we have your data.
to test decryption of three files.
to delete all the stolen data after payment.
-------------------------------------[ Blog ]--------------------------------------------------
Eclipse Blog: http://eclipse4g5kxfwsvpu4qx5sdcnrji6gxl5gt67bucjlgt35g7akvjoid.onion/
*data will be automatically uploaded and published on our DLS in the event of non-payment.
*after publication, they will be available to everyone and will be stored on our Tor CDN servers!
| Type | IOC |
|---|---|
onion url
|
http://eclipse4g5kxfwsvpu4qx5sdcnrji6gxl5gt67bucjlgt35g7akvjoid.onion/ |