Exitium

Original ransom notes collected for this group.

YOU ARE UNDER ATTACK.html 1511

Content	Action
---------------------------------------------------------------------------------------------------- Hello, Management! Files from your infra have been encrypted by Exitium ransomware! All data, including passports, IDs, employes, healthcare and other data has been encrypted and can be lost irrevocable! CONTACT US WITHIN 168 HOURS OR YOUR FILES WILL STAY ENCRYPTED FOREVER NO NEED TO TRY DELETE OR MODIFY ENCRYPTED FILES! THIS WILL LEAD TO IMPOSSIBILITY OF FILE DECRYPTION How to contact us: 1. Download Tox here - https://github.com/TokTok/qTox/releases/download/v1.18.3/setup-qtox-x86_64-release.exe 2. Go to 'Add Friend' and send request to this TOX_ID: 0932023CDBDC780B80B4772D22975C9AAD6D1A5921AA4C746C9E4851A307DE1888A6F56FDFBE 3. After you contact us we will start negotiations Option of reporting to the FBI or police or any other service is pointless because they would not help you and forbid you paying the amount we are after. This would momentarily lead to data loss and you will lose any chance of decryption. From our side we guarantee that you will receive your data after payment because we are no hacktivists and not politically motivated. We will leave the ransom, paying, negotiating process as a secret and will not expose this case to any public and remove your files from our storage. OUR BLOG(Tor link): http://m3ksukzn2glzfdvlusohril7n3iyk4z4fudf6mm22lwhpbpt5aiee5qd.onion/ ----------------------------------------------------------------------------------------------------

Content

Action


----------------------------------------------------------------------------------------------------
Hello, Management!
Files from your infra have been encrypted by Exitium ransomware!

All data, including passports, IDs, employes, healthcare and other data has been encrypted and can be lost irrevocable!
CONTACT US WITHIN 168 HOURS OR YOUR FILES WILL STAY ENCRYPTED FOREVER
NO NEED TO TRY DELETE OR MODIFY ENCRYPTED FILES!
THIS WILL LEAD TO IMPOSSIBILITY OF FILE DECRYPTION

How to contact us:
1. Download Tox here - https://github.com/TokTok/qTox/releases/download/v1.18.3/setup-qtox-x86_64-release.exe
2. Go to 'Add Friend' and send request to this TOX_ID: 0932023CDBDC780B80B4772D22975C9AAD6D1A5921AA4C746C9E4851A307DE1888A6F56FDFBE
3. After you contact us we will start negotiations


Option of reporting to the FBI or police or any other service is pointless because they would not help you and forbid you paying the amount we are after.
This would momentarily lead to data loss and you will lose any chance of decryption.

From our side we guarantee that you will receive your data after payment because we are no hacktivists and not politically motivated.
We will leave the ransom, paying, negotiating process as a secret and will not expose this case to any public and remove your files from our storage.


OUR BLOG(Tor link): http://m3ksukzn2glzfdvlusohril7n3iyk4z4fudf6mm22lwhpbpt5aiee5qd.onion/
----------------------------------------------------------------------------------------------------