Ransomware
Abuser: [email protected]
My PC, Windows 7 Ultimate SP1 64bits, was hacked on 10 May 22 by [email protected] or [email protected]. I tend to leave it on all the time and I was surprised to log into it and find that all my files (>600GB) had been moved to my secondary drive (no OS). The only thing on my desktop was a text file explaining the situation and demanding a ransom in Bitcoins. The drive was encrypted with Microsoft's BitLocker technology, something I've only heard of, never set up (my 1st mistake). I contacted the hacker via email to make sure I received the password. He confirmed it and just insisted that he make the transfer soon. As I don't have cryptocurrency skills, it took me 1 day to open the account and deposit the amount. He asked me BRL 700 (~US$137). My exchange would only allow transferring the amount 3 days later, for security reasons. During that time I researched many things. Other attacks by the same hacker, brute force attack programs, bitcracker, passware, etc... I'll tell you right now, none of them will work. The passware costs more than $800, which is unfeasible depending on the situation. Bitcracker, despite being a noble initiative, requires high-performance NVIDIA graphics cards to try to crack the password. Warning: Do not format your encrypted drive, you will lose everything, no return. Don't waste your time trying to guess the password. It uses long passwords and with non-ASCII characters, it is impossible to guess. There's no human way to get his data back if he doesn't send the password. (And that's not his disclosure, it's a fact!) In my case, the amount was doable and I chose to pay, contrary to the recommendation of several security sites. After confirming the transfer of bitcoins, he sent me the password, just to give you an idea: vΦxî◙╧▬╫¶╘≥N^&_%0å>ô0á÷#%$$φ1ùφ«]¯š"♫╡▀^@@╞♪*.$ú¡Z↔╝11₧↑*↔æ(¥ ↓ë2ßφ1ór¥ Different from what I read about it in some forums, my password worked.
Brazil, 2022-05-14 17:34:09
United States, 2022-05-28 01:50:57