Cloak

!!! ATTENTION !!!

Your network is hacked and files are encrypted.
	Including the encrypted data we also downloaded other confidential information:
	Data of your employees, customers, partners, as well as accounting and
	other internal documentation of your company.

All data is stored until you will pay.
	After payment we will provide you the programs for decryption and we will delete your data.
	If you refuse to negotiate with us (for any reason) all your data will be put up for sale.

What you will face if your data gets on the black market:
	1) The personal information of your employees and customers may be used to obtain a loan or
		purchases in online stores.
	2) You may be sued by clients of your company for leaking information that was confidential.
	3) After other hackers obtain personal data about your employees, social engineering will be
		applied to your company and subsequent attacks will only intensify.
	4) Bank details and passports can be used to create bank accounts and online wallets through 
		which criminal money will be laundered.
	5) You will forever lose the reputation.
	6) You will be subject to huge fines from the government.
		You can learn more about liability for data loss here:
			https://en.wikipedia.org/wiki/General_Data_Protection_Regulation
			https://gdpr-info.eu/
	Courts, fines and the inability to use important files will lead you to huge losses.
	The consequences of this will be irreversible for you.
	Contacting the police will not save you from these consequences,
		but will only make your situation worse.

You can get out of this situation with minimal losses
	To do this you must strictly observe the following rules:
		DO NOT Modify, DO NOT rename, DO NOT copy, DO NOT move any files.
			Such actions may DAMAGE them and decryption will be impossible.
		DO NOT use any third party or public decryption software, it may also DAMAGE files.
		DO NOT Shutdown or Reboot the system this may DAMAGE files.
		DO NOT hire any third party negotiators (recovery/police, etc.)
		You need to contact us as soon as possible and start negotiations.

Instructions for contacting our team:
	Download & Install TOR browser: https://torproject.org
	For contact us via LIVE CHAT open our
	> Website:  http://47h4pwve4scndaneljfnxdhzoulgsyfzbgayyonbwztfz74gsdprz5qd.onion
	> Login:    [snip]
	> Password: [snip]
	If Tor is restricted in your area, use VPN
	If you have any problems with LIVE CHAT you can send a message here:
	> Email: [email protected]

View on RansomLook

!!! ATTENTION !!!

Your network is hacked and files are encrypted.
	Including the encrypted data we also downloaded other confidential information:
	Data of your employees, customers, partners, as well as accounting and
	other internal documentation of your company.

All data is stored until you will pay.
	After payment we will provide you the programs for decryption and we will delete your data.
	If you refuse to negotiate with us (for any reason) all your data will be put up for sale.

What you will face if your data gets on the black market:
	1) The personal information of your employees and customers may be used to obtain a loan or
		purchases in online stores.
	2) You may be sued by clients of your company for leaking information that was confidential.
	3) After other hackers obtain personal data about your employees, social engineering will be
		applied to your company and subsequent attacks will only intensify.
	4) Bank details and passports can be used to create bank accounts and online wallets through 
		which criminal money will be laundered.
	5) You will forever lose the reputation.
	6) You will be subject to huge fines from the government.
		You can learn more about liability for data loss here:
			https://en.wikipedia.org/wiki/General_Data_Protection_Regulation
			https://gdpr-info.eu/
	Courts, fines and the inability to use important files will lead you to huge losses.
	The consequences of this will be irreversible for you.
	Contacting the police will not save you from these consequences,
		but will only make your situation worse.

You can get out of this situation with minimal losses
	To do this you must strictly observe the following rules:
		DO NOT Modify, DO NOT rename, DO NOT copy, DO NOT move any files.
			Such actions may DAMAGE them and decryption will be impossible.
		DO NOT use any third party or public decryption software, it may also DAMAGE files.
		DO NOT Shutdown or Reboot the system this may DAMAGE files.
		DO NOT hire any third party negotiators (recovery/police, etc.)
		You need to contact us as soon as possible and start negotiations.

Instructions for contacting our team:
	Download & Install TOR browser: https://torproject.org
	For contact us via LIVE CHAT open our
	> Website:  http://7puvv4qtcrigzbxshqibkpibzbmrs6thb7s6uf3tisqfp3t2ddpp66id.onion
	> Login:    [snip]
	> Password: [snip]
	If Tor is restricted in your area, use VPN

View on RansomLook

Urgent! Your files have been encrypted - act now to recover them!

Greetings,
We are a Ransomware Group, and we have successfully infiltrated your system and encrypted your valuable files.
We have the only working decryptor, which is the one way to restore your data.

Do not attempt to recover the files yourself or involve any third-party organizations, such as law enforcement or cybersecurity firms.
Any attempts to do so will result in the permanent deletion of your files without any chance of recovery.

To regain access to your files, you must follow these steps:
   Download & Install TOR browser: https://www.torproject.org/download/
   For contact us via LIVE CHAT open our
   > Website: http://6mw4yczxeqoiq7rgwnpi75qxsjd5jykuutpatflybodwlckoarhfdlid.onion
   > Login: [snip]
   > Password: [snip]
   > Secret Question: [snip]
   If Tor is restricted in your area, use VPN.   We offer a free trial decryption of two insignificant files (<5 MB) to demonstrate our capabilities and build trust.
   We will provide you with further instructions and the exact amount of ransom required to decrypt your files.
   Make the payment in Bitcoin to the provided wallet address.
   Once the payment is confirmed, we will send you the decryptor.

Please note that you have a limited time to act before the deadline expires.
After that, the decryptor will be destroyed, and your files will remain encrypted forever.
Do not ignore this message or attempt to deceive us.
We have already infiltrated your system, and we can easily detect any attempts to bypass our ransom demands.

Take this situation seriously and act quickly to recover your files.
Write to us in the chat to begin the process.

Sincerely, Ransomware Group

View on RansomLook