List of notes
README_Howtorecover.txt
|
# RA World ---- ## Notification Hello! "[snip]"! We are RA World Ransomware! Your data are stolen and encrypted when you read this letter. We had copied more than 85 GB data to our server. Don't worry, your data will not be published if you do what we want. But if you don't pay, we will release the data after 30 days, contact your customers and regulators and destroy your system again and again. ## What do you need to do? Contact us and discuss how to protect your files. We can decrypt some files for free to prove that the decryption tool works properly. ## How contact us? You can visit online chat room or use qTox to contact us. [+] online chat room info: RoomID:[snip] Password:[snip] Link:http://raworlddecssyq43oim3hxhc5oxvlbaxuj73xbz2pbbowso3l4kn27qd.onion [+] qTox info: Our qTox ID is: 1C2163487A1356EA767FD0F77A29553DF0541F977FA9958EC8CD7530E3BDBB3D8468BD7B0386 We don't have any other contacts. If there is no contact within 3 days, we will make sample files public. If there is no contact within 7 days, we will stop communicating and release data in batches. You can get 50% discount and some time for negotiation if you contact us within 3 days. ## Sample files release link: We select some files as samples that you can download and check it: [+] https://gofile.io/d/[snip] ## RA World Office Site: [Temporary address] http://66.78.40.205/raworld [Permanent address] http://raworldw32b2qxevn3gp63pvibgixr4v75z62etlptg3u3pmajwra4ad.onion ## Other Tips You can download qTox from their official website: [+] https://qtox.github.io You can use Tor Browser to open .onion url. Ger more information from Tor office website: [+] https://www.torproject.org |
Data breach warning.txt
|
# RA World ---- ## Notification Your data are stolen and encrypted when you read this letter. We have copied all data to our server. Don't worry, your data will not be made public if you do what I want. But if you don't pay, we will release the data, contact your customers and regulators and destroy your system again. We can decrypt some files to prove that the decrypt tool works correctly. ## What we want? Contact us, pay for ransom. If you pay, we will provide you the programs for decryption and we will delete your data where on our servers. If not, we will leak your datas and your company will appear in the shame list below. If not, we will email to your customers and report to supervisory authority. ## How contact us? We use qTox to contact, you can download qTox from office website: https://qtox.github.io Our qTox ID is: 358AC0F6C813DD4FD243524F040E2F77969278274BD8A8945B5041A249786E32CC784580F2EC We have no other contacts. If there is no contact within 3 days, you will appear on our website and we will make sample files public. If there is no contact within 7 days, we will stop communicating and release data in batches. The longer time, the higher ransom. ## RA World Office Site: [Permanent address] http://raworldw32b2qxevn3gp63pvibgixr4v75z62etlptg3u3pmajwra4ad.onion [Temporary address] http://161.35.200.18 ## Sample files release link: Sample files: https://gofile.io/d/[snip] ## Unpay Victim Lists *** You'll be here too if you don't pay! *** *** More and more people will get your files! *** [snip] You can use Tor Browser to open .onion url. Ger more information from Tor office website: https://www.torproject.org |