Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Ransom Note: bitpaymer_v2.txt

Group: Bitpaymer

Hello [snip],

Your network was hacked and encrypted.

No free decryption software is available on the web.

Email us at SARAH.BARRICK@PROTONMAIL.COM, MARY.SWANN@PROTONMAIL.COM, Ashley.Mowat@protonmail.com 
(or) LINDA.HARTLEY@TUTANOTA.COM, HENRY.PROWSE@TUTANOTA.COM, Shane.Gilles@tutanota.com 
to get the ransom amount.

Please, use your company name as the email subject.

TAIL:[snip]

KEY:[snip]

Indicators of Compromise
Type IOC
email SARAH.BARRICK@PROTONMAIL.COM
email MARY.SWANN@PROTONMAIL.COM
email Ashley.Mowat@protonmail.com
email LINDA.HARTLEY@TUTANOTA.COM
email HENRY.PROWSE@TUTANOTA.COM
email Shane.Gilles@tutanota.com