STRLCPY/ransomware_notes

Total 1 files

■ ■ ■ ■ ■ ■

qilin/README-RECOVER-[rand].txt

1	+	-- Qilin
2	+
3	+	Your network/system was encrypted.
4	+	Encrypted files have new extension.
5	+
6	+	-- Compromising and sensitive data
7	+
8	+	We have downloaded compromising and sensitive data from you system/network
9	+	If you refuse to communicate with us and we do not come to an agreement, your data will be published.
10	+	Data includes:
11	+	- Employees personal data, CVs, DL , SSN.
12	+	- Complete network map including credentials for local and remote services.
13	+	- Financial information including clients data, bills, budgets, annual reports, bank statements.
14	+	- Complete datagrams/schemas/drawings for manufacturing in solidworks format
15	+	- And more...
16	+
17	+	-- Warning
18	+
19	+	1) If you modify files - our decrypt software won't able to recover data
20	+	2) If you use third party software - you can damage/modify files (see item 1)
21	+	3) You need cipher key / our decrypt software to restore you files.
22	+	4) The police or authorities will not be able to help you get the cipher key. We encourage you to consider your decisions.
23	+
24	+	-- Recovery
25	+
26	+	1) Download tor browser: https://www.torproject.org/download/
27	+	2) Go to domain
28	+	3) Enter credentials-- Credentials
29	+
30	+	Extension: [snip]
31	+	Domain: e3v6tjarcltwc4hdkn6fxnpkzq42ul7swf5cfqw6jzvic4577vxsxhid.onion
32	+	login: [snip]
33	+	password:[snip]
34	+