Notas de rescate — doppelpaymer

Contactos, enlaces de pago y direcciones del atacante redactados ([redactado]).

doppelpaymer1.txt

[snip]
Your network has been hacked.
Your ID: 106
Your files, backups and shadow copies are unavailable until you pay for a decryption tool.
Otherwise your sensitive data will be shared to public at
[redactado]
and all the rest will remain unreachable to you.
TO SAVE YOUR DATA FROM DESTRUCTION:
DO NOT RESET OR SHUTDOWN your PC or server.
DO NOT RENAME/ MOVE/ DELETE the encrypted and readme files.
DO NOT USE ANY RECOVERY TOOLS that is aimed to restore encrypted files.
TO GET YOUR DATA BACK contact us:
        [redactado]
OR
        [redactado]
Contact us within 48 HOURS from the date your network have been infected.
After the period expires and no contact is made, the link and keys for your data will be erased completely.

doppelpaymer2.txt

Your network was hacked. Your ID: 269
DO NOT RESET OR SHUTDOWN your PC or server.
DO NOT RENAME/ MOVE/ DELETE the encrypted and readme files.
Info:
[redactado]
[redactado]
If you decide not to cooperate your sensitive data will be shared to public at
[redactado]
and all the rest will remain unreachable to you.

doppelpaymer3.txt

Your network has been hacked.
Your ID: 191
Your files, backups and shadow copies are unavailable until you pay for a decryption tool.
If no contact made in 3 business days after the infection
first portion of data will be shared to public at
[redactado]
and all the rest will remain unreachable to you.
TO SAVE YOUR DATA FROM DESTRUCTION:
DO NOT RESET OR SHUTDOWN your PC or server.
DO NOT RENAME/ MOVE/ DELETE the encrypted and readme files.
DO NOT USE ANY RECOVERY TOOLS that is aimed to restore encrypted files.
TO GET YOUR DATA BACK contact us on your personal page:
    1. Download and install Tor Browser: [redactado]
    2. Run the browser and wait for initialization.
    3. Copy to the address bar:
        [redactado]
    4. Follow the instructions on the site.
    5. Contact us via email [redactado] OR live chat on your personal page.
    7. The link above is valid for 21 days.
    8. If you ask about proof of data exfiltrated before payment -
       we will share proofs at our data leaks portal.