по информации специалиста из Аваст Jakub Kroustek
https://twitter.com/JakubKroustek/status/1038680437508501504
https://twitter.com/JakubKroustek/status/1041410034150850561
https://twitter.com/JakubKroustek/status/1041954713187565568
https://twitter.com/JakubKroustek/status/1042897005587189760
https://twitter.com/JakubKroustek/status/1047053857359056897
https://twitter.com/JakubKroustek/status/1048159501457739776
https://twitter.com/JakubKroustek/status/1050351551116701701
по Crysis добавились еще несколько вариантов с шифрованием
A new variant of the #CrySiS / #Dharma ransomware: ".[
[email protected]][B].brrr[/B]" + "FILES ENCRYPTED.txt" + "Info.hta".
и
Less than a week, and there's yet another version of the #CrySiS #ransomware - extension "[B].gamma[/B]" (".id-%ID%.[
[email protected]].gamma") + ransomnotes in "FILES ENCRYPTED.txt".
и
Another day, another new #CrySiS/#Dharma #ransomware varianta - this time with "[B].monro[/B]" extension and usual "FILES ENCRYPTED.txt" & "Info.hta" ransom notes. Email "
[email protected]"
и
Another #CrySiS/#Dharma #ransomware variant - extension [B]".bkp".[/B] [
[email protected]] (@gexcolo)
и
Another #CrySiS/#Dharma #ransomware variant. This time with[B] ".btc"[/B] file extension + Info.hta + "FILES ENCRYPTED.txt" + email "
[email protected]".
и
a new CrySiS/Dharma variant that appends the [B].bgtx[/B] extension and drops ransom notes named Info.hta and FILES ENCRYPTED.txt.
и
#CrySiS / #Dharma #ransomware - .[
[email protected]].[B]waifu[/B]
