Sicari

Original ransom notes collected for this group.

README_SICARII_LOCKED.txt 1168
Content Action
Hello, your files have been encrypted using a strong algorithm. If you want to decrypt your files without any hassle contact us through our onion domain and we can discuss payment. In order to access the domain you must download Tor browser on a non-infected device and access the website which our contact info will be shown. We only accept BitCoin and Monero so if you think you can hand us a gift card and call it a day you'd be wrong.

If you needed another reason to worry, we didn't just encrypt your files. We exfiltrated your files for a leak and your credentials. You have 24 hours from infection (unless said otherwise) before your information is leaked and possibly sold. But, again, if you pay your worries will go away.

For contact/payment, here's our onion sites:

sicariifoucvhyqg54smi3esg5sfcyw5z65t6yigqu4loyuoz62bb2id.onion
sicarilxx2br6esqnhad4w26bcgb5j2snbbnhyo4b6t7kby2oy4x3jad.onion
sicari7m63wlggfxajiuonfsk72fgencne5ztzakyuhfxzq5rnbkjead.onion
sicariktdbhjtrk6f2pwdh6wlequw7pcjva25skkzz4m3zz3opyox3qd.onion
sicari7zpu3mtxqggde7mu3ywppntdqg22arcukvlaihjbfcb2rnktid.onion
sicarinb4ktqcdpubjifzw3vixvzgtwacjmc5ks56kev52gxitegigad.onion