ACSec/Observatorio
← Notas de rescate

Notas de rescate — novagroup

Contactos, enlaces de pago y direcciones del atacante redactados ([redactado]).

[id].README.txt

# Nova Group
Your unique network Id: [snip]
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
[+] What happened?
Your computers and servers are encrypted, backups are deleted. We use strong encryption algorithms, so you cannot decrypt your data.Each system in the network is encrypted with a unique identifier.
But you can restore everything by purchasing a special program from us - universal decryptor. This program will restore all your network.
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
[+] What guarantees you have?
We are a non-politically motivated international group from anywhere in the world, we care about nothing but your money
You can send some encrypted files from your network and we will decrypt it for free.
We value our reputation. If we do not fulfill our work and obligations, no one will pay us. It's not in our interest.
All of our decryption software is perfectly tested and will decrypt your data. We will also provide support in case of problems.
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
[+] Attention!
Do not rename encrypted files.
Do not try to decrypt your data using third party software, it may cause permanent data loss.
Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
[+] How to cantact with us?
     1. Download and install [redactado] Messenger ([redactado]
     2. Please contact with the ID [redactado]
     3. Or you can contact us via email at [redactado]
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
[+]Do you need forensics?
Note that we are a professional team with different nationalities
ransomware is a part of the world of cyber security, even big companies make payments, but no news is communicated to the outside world So we advise you not to talk to anyone about your business being hacked
All logs are completely removed So you don't even know how you got hacked But don't worry, we will also provide you with a complete security report
The virus has the ability to self-destruct, so reverse engineering is not possible
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
[+] What will I get in case of agreement?
You WILL GET full DECRYPTION of your machines in the network
RECOMMENDATIONS for securing your network perimeter.
And the FULL CONFIDENTIALITY ABOUT INCIDENT.
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
[+] Warnings!
Do not go to recovery companies, they are just middlemen who will make money off you and cheat you.
They secretly negotiate with us, buy decryption software and will sell it to you many times more expensive or they will simply scam you.
In order to create a public decryption, the executable file of the virus needs to be available to reverse engineering experts, but since the program has the ability to self-destruct, so far no public file has been placed on the Internet So any claim of decryption by i
Notas: novagroup | ACSec Observatorio Ransomware