| 您当前的位置：首页 > 公司动态 |
一客户中.Horse4444后缀勒索者病毒 |
| 时间：2020-08-10 14:26:11 |
今天鸿萌接到一个客户数据业务案例，他们的服务器中了后缀为.Horse4444的勒索者病毒，整个服务器内的数据文件都被加密，所有的有用文件，包括数据库都被添加了.Horse4444后缀。整个公司业务瘫痪。黑客留下如下信息：
YOUR FILES ARE ENCRYPTED !!!
TO DECRYPT, FOLLOW THE INSTRUCTIONS:
To recover data you need decrypt tool.
To get the decrypt tool you should:
1.In the letter include your personal ID! Send me this ID in your first email to me!
2.We can give you free test for decrypt few files (NOT VALUE) and assign the price for decryption all files!
3.After we send you instruction how to pay for decrypt tool and after payment you will receive a decryption tool!
4.We can decrypt few files in quality the evidence that we have the decoder.
DO NOT TRY TO DO SOMETHING WITH YOUR FILES BY YOURSELF YOU WILL BRAKE YOUR DATA !!! ONLY WE ARE CAN HELP YOU! CONTACT US:
XXX@aol.com
XXX@india.com
ATTENTION !!! THIS IS YOUR PERSONAL ID WICH YOU HAVE TO SEND IN FIRST LETTER:
63 BA FB 45 C6 1E 72 00 C3 1F D5 1D E1 9E 4D 41
92 49 66 41 8E AC 9E 1E 1E EA 97 C8 01 17 E9 8F
D0 57 14 96 DF 43 B8 77 B7 06 5A 48 71 39 6A EC
06 D6 DD 93 8F A6 82 60 DF A6 D3 E1 99 F1 69 EC
C6 A9 9F E5 02 A4 D3 33 12 90 56 5B 84 F1 79 FE
BE 68 46 9E DF 01 48 2D A2 27 88 F2 46 58 F5 1A
36 D7 91 B0 1B 9E E7 DF 35 D7 A7 1C 68 AC 53 22
9D FE BD 71 8F CE 08 B9 73 34 93 A2 E9 8B CF 9A
F7 26 FE 4C D4 E5 62 D7 C9 57 D5 C0 06 11 C4 04
3F 29 DB CA 9C 91 F9 92 36 07 9C DD D3 4B 01 4E
C2 A7 51 85 37 72 CE 44 34 39 A5 7C 69 0A 60 54
66 89 2A 55 EE DE 7B 1C 1E 97 B6 6F B7 81 F9 56
AD BB B1 4A C5 96 A9 4A 9F EC 20 94 28 B8 96 8B
36 C2 9E 9E C6 60 7E 8D B1 B4 3B 29 AA 6A 75 94
7B 2F 7B A2 8C 5C E4 56 8E CA 4F BE 10 FF 22 1F
C5 C1 00 A0 F0 A6 E2 30 84 31 7D 1D 18 41 34 54
客户中毒文件，如下图所示：