Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Ransom Notes:

IOC

Your files has been encrypted
To recover them you need decryption tool

You can contact us in two ways:
1 Download TOR Browser https://www.torproject.org/download/ (sometimes need VPN to download)
Open TOR browser and follow by link below:
http://weaxorpemwzoxg5cdvvfd77p3qczkxqii37ww4foo2n4jcft3mytbpyd.onion/lsaHqOhaJLOyrWSPvtJajdzqrftqzOlt/[snip]

2 Or email: datahelper@cyberfear.com
Your key: [snip]
Include your key in your letter
Our guarantee: we provide free decyrption for 3 files up to 3 megabytes (not zip,db,backup)

Indicators of Compromise
Type IOC
email datahelper@cyberfear.com
onion url http://weaxorpemwzoxg5cdvvfd77p3qczkxqii37ww4foo2n4jcft3mytbpyd.onion/lsaHqOhaJLOyrWSPvtJajdzqrftqzOlt/[snip]