Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks
wastedlocker.txt[snip]
YOUR NETWORK IS ENCRYPTED NOW
USE 88828@PROTONMAIL.CH | 47266@AIRMAIL.CC TO GET THE PRICE FOR YOUR DATA
DO NOT GIVE THIS EMAIL TO 3RD PARTIES
DO NOT RENAME OR MOVE THE FILE
THE FILE IS ENCRYPTED WITH THE FOLLOWING KEY:
[begin_key]*[end_key]
KEEP IT
| Type | IOC |
|---|---|
email
|
88828@PROTONMAIL.CH
|
email
|
47266@AIRMAIL.CC
|