Ragnar Locker Ransomware Demand

An interesting thing happened on the internet with week. U.S. travel management firm was hit with Ragnar Locker ransomware. The company agreed to pay and handed over $4.5 mln in bitcoin reut.rs/3jXvpRY HELLO CWT company, IF YOU ARE READING THIS, IT'S MEAN YOUR DATA WAS ENCRYPTED AND YOUR SENSITIVE PRIVATE INFORMATION WAS STOLEN! READ CAREFULLY THE WHOLE INSTRUCTION NOTE TO AVOID DIFFICULTIES WITH YOUR DECRYPTION. RAGNAR_LOCKER "YOU HAVE TO CONTACT US VIA LIVE CHAT IMMEDIATELY TO RESOLVE THIS CASE AND MAKE A DEAL" (Contact information you will find at the bottom of this note) !!!! WARNING !!!! DO NOT Modify, rename, copy or move any files on your storage them decryption will be impossible. DO NOT use any third-party or public decryption software, it takes too much damage your files. DO NOT Shutdown or Reset your system, it can DAMAGE FILES. There is ONLY one possible way to get back your files - contact us and pay for the special decryption key! For your guarantee we will decrypt 2 of your files FOR FREE, as a proof that it works. Don't waste your time, the link for contact us will be deleted if there is no contact made in closes time and you will NEVER restore your DATA. HOWEVER if you will contact us within 2 day since be penetrated - you can get a very SPECIAL PRICE. We have downloaded more than 2 TB of your PRIVATE SENSITIVE Data, including your billing info, insurance cases, financial reports, Bus ness audit, banking accounts! Also we have corporate correspondence, information about your clients such as AVA Equal? Abbott Laboratories, AIG, Amazon, Boston Scientific, Facebook, J&J, SONO, Estee Lauder and many others. We're not here to tell you about your partners and even about your staff, there are some screenshots just as a proofs of what we got on you. https://prnt.sc/com8q10 https://prnt.sc/et0g2c https://prnt.sc/et0g2b https://prnt.sc/et0g2p https://prnt.sc/et0g2t https://prnt.sc/et0g2x https://prnt.sc/et0g2q https://prnt.sc/et0g2r https://prnt.sc/et0g2s We don't care your trial balances in USD WHOLE Data that gathered from your private files and directories could be published in MASS MEDIA for BREAKING NEWS! yours partners, clients and investors would be notified about Lease. However if we make a deal everything would be kept in secret and all your data will be restored. You can take a look for some more examples of what we have, right now it's a private hidden page, but it could become accessible for Public View if you decide not pay. Use Tor browser to open the link: http://6m7j17q1a3g1jkh1.onion/?X7acqxmHRM4KC161Z1X To view the pages content use password: G5M7SNYQ

A screenshot of a tweet reports that a U.S. travel management company was hit by Ragnar Locker ransomware and paid $4.5 million in bitcoin. The embedded ransom note threatens to publish stolen private data unless the company contacts the attackers and pays for a decryption key. The joke is the absurdly formal, error-filled ransom demand presented as a newsworthy internet incident. EN: A screenshot of a tweet reports that a U.S. travel management company was hit by Ragnar Locker ransomware and paid $4.5 million in bitcoin. The embedded ransom note threatens to publish stolen private data unless the company contacts the attackers and pays for a decryption key. The joke is the absurdly formal, error-filled ransom demand presented as a newsworthy internet incident.

• @infosecmemes / 348 2020-08-02