首页 > 业界动态

      6月15日，天津某民营医药上市公司两台服务器中了一种新的勒索者病毒，病毒生成随机后缀：.e08418和.7v0f88，导致服务器中的财务软件无法使用。释放病毒的人留下如下信息：
---=== Welcome. Again. ===---

[+] Whats Happen? [+]

Your files are encrypted, and currently unavailable. You can check it: all files on you computer has expansion 7v0f88.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).

[+] What guarantees? [+]

Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.

[+] How to get access on website? [+]

You have two ways:

1) [Recommended] Using a TOR browser!
  a) Download and install TOR browser from this site: https://torproject.org/
  b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/980DD5D254AF1792

2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
  a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
  b) Open our secondary website: http://decryptor.top/980DD5D254AF1792

Warning: secondary website can be blocked, thats why first variant much better and more available.

When you open our website, put the following data in the input form:
Key:...... ......
      客户生产销售因此遭遇停顿。鸿萌针对勒索者软件，有完善的解决方案。部署了鸿萌的解决方案的服务器，在遭受非法入侵，或者人为破坏后，可以快速将数据还原为正常状态。比如在1；30分，服务器遭受病毒入侵，数据被加密，或者D盘被误格式化。鸿萌都可以让您在1分钟之内还原为正常的数据。免除勒索烦恼。鸿萌，为客户数据安全保驾护航。
      我们随时欢迎您的垂询！