Clearwater

Original ransom notes collected for this group.

CLEARWATER_README.txt 413
Content Action
Your files have been encrypted by CLEARWATER Ransomware. Unluck :(
Do not attempt decryption or recovery without proper instructions or your data will be lost.
To contact us, write to this TOR address:
http://b6rgpykvtyqah4q5tii25ouevr5g3u2s7pqc24jdlyhrfms3itljtkqd.onion/index.html?chat=[snip]

And remember, nothing personal, exclusively business!
Have a nice day, jolly Christmas and Happy New Year! :)