Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Ransom Note: RECOVERY_INFO2.txt

Group: Weaxor

Your files has been encrypted
To recover them you need decryption tool

You can contact us in two ways:
1 Download TOR Browser https://www.torproject.org/download/ (sometimes need VPN to download)
Open TOR browser and follow by link below:
http://weaxorpemwzoxg5cdvvfd77p3qczkxqii37ww4foo2n4jcft3mytbpyd.onion/lsaHqOhaJLOyrWSPvtJajdzqrftqzOlt/[snip]

2 Or email: datahelper@cyberfear.com
Your key: [snip]
Include your key in your letter
Our guarantee: we provide free decyrption for 3 files up to 3 megabytes (not zip,db,backup)

Indicators of Compromise
Type IOC
email datahelper@cyberfear.com
onion url http://weaxorpemwzoxg5cdvvfd77p3qczkxqii37ww4foo2n4jcft3mytbpyd.onion/lsaHqOhaJLOyrWSPvtJajdzqrftqzOlt/[snip]