Notas de rescate — risen

Contactos, enlaces de pago y direcciones del atacante redactados ([redactado]).

$Risen_Note.txt

RisenNote :
Read this text file carefully.
We have penetrated your whole network due some critical security issues.
We have encrypted all of your files on each host in the network within strong algorithm.
We have also Took your critical data such as docs, images, engineering data, accounting data, customers and ...
	And trust me, we exactly know what should we collect in case of NO corporation until the end of the deadline we WILL leak or sell your data,
	the only way to stop this process is successful corporation.
We have monitored your Backup plans for a whileand they are completely out of access(encrypted)
The only situation for recovering your files is our decryptor,
	there are many middle man services out there whom will contact us for your caseand add an amount of money on the FIXED price that we gave to them,
	so be aware of them.
Remember, you can send Upto 3 test files for decrypting, before making payment,
	we highly recommend to get test files to prevent possible scams.
In order to contact us you can either use following email :
Email address : [redactado]
Or If you weren't able to contact us whitin 24 hours please Email : [redactado], [redactado]
Leave subject as your machine id : [snip]
If you didn't get any respond within 72 hours use our blog to contact us,
therefore we can create another way for you to contact your cryptor as soon as possible.
TOR BLOG : [redactado]

Risen_Guide.hta

<doctype html><html><head><hta:application applicationname="Application Name" border="none" caption="No" contextmenu="No" maximizebutton="No" minimizebutton="No" navigable="No" scroll="Yes" selection="No" showintaskbar="No" windowstate="Maximize"><meta name="viewport" content="width=device-width"><meta http-equiv="x-ua-compatible" content="ie=9"><title>Risen</title><style type="text/css">*{box-sizing:border-box;margin:0;padding:0}body{background-color:#000;margin:0 auto;color:#e2e8f0;padding:1.25rem 0;width:90%;font-family:sans-serif}.logo{text-align:center}.logo>svg{fill:red;width:8rem;height:8rem}.first-title{border-radius:.25rem;font-size:1.875rem;line-height:2.25rem;text-align:center;text-transform:uppercase;margin:2rem 0}.first-title span{font-weight:700;color:#dc2626}.first-box{font-size:1.2rem;position:relative;padding:1.5rem;margin-top:1rem;border:4px dotted #ef4444;text-align:center}.first-box>p:first-child{position:absolute;left:1rem;top:-1.9rem;padding:.75rem;font-size:1.125rem;line-height:1.75rem;background-color:#000}.first-box span{color:#dc2626}.sec-title{position:absolute;top:-.25rem;left:50%;transform:translate(-50%,-50%);padding-left:1rem;padding-right:1rem;font-size:1.125rem;line-height:1.75rem;background-color:#000}.sec-box{width:100%;white-space:nowrap;height:350px;margin-top:2.5rem}.contactus,.attention{padding:10px;white-space:normal;height:100%;position:relative}.contactus{word-wrap:break-word;padding-top:20px;margin-right:20px;width:30%;float:left;font-size:17px;border:4px dotted #3b82f6;background-color:rgba(59,130,246,.1)}.attention{word-wrap:break-word;float:left;width:68.5%;font-size:22px;border:4px dotted #ef4444;background-color:rgba(239,68,68,.1)}.attention ul{word-wrap:break-word;width:100%;position:absolute;top:50%;transform:translateY(-50%);list-style-position:inside}@media only screen and (min-width:2000px){.logo>svg{width:10rem;height:10rem}.first-title{font-size:2.8rem}.first-box{font-size:2rem}.sec-box{height:500px}.attention ul li{font-size:30px;line-height:37px}.contactus{padding:30px;font-size:26px}.sec-title,.first-box>p:first-child{font-size:2rem}}@media only screen and (min-width:2900px){.logo>svg{width:14rem;height:14rem}.first-title{font-size:3.5rem}.first-box{font-size:2.9rem}.sec-box{height:700px}.attention ul li{font-size:42px;line-height:55px}.contactus{padding:35px;font-size:35px}}@media only screen and (max-width:1480px){.sec-box{white-space:normal;height:fit-content}.contactus,.attention{width:100%;display:block;float:none}.contactus{padding:2rem;font-size:1.2rem}.attention{margin-top:30px;font-size:1.2rem}.attention ul{position:static;transform:none;line-height:2}}</style></head><body><div class="logo"><svg width="502pt" height="465pt" version="1.0" viewBox="0 0 502 465" xmlns="[redactado] transform="translate(0 465) scale(.1 -.1)"><path d="m2085 4385c-5-2-37-11-70-21s-76-27-95-38c-46-27-142-105-155-125-5-9-23-31-39-48-35-39-56-79-56-105 0-19 45-68 63-68 4 0 27-9 49-20 23-11 45-20 49-20 5 0 28-13 52-30 25-16 48-30 52-30 27 0 224-188 306-292 31-39 110-200 134-273 51-152 49-89 55-1620 3-786 6-1430 8-1431 1-1 10-10 20-21 54-62 140-51 183 23 16 27 18 120 18 1413 1 847-3 1406-9 1440-5 31-14 88-20 126-13 78-48 190-83 262-76 157-227 362-315 427-26 19-60 48-76 65-17 17-35 31-41 31-7 0-20 9-30 20s-23 20-30 20-20 9-31 21c-18 20-18 21 1 32 42 24 160 49 205 43 103-14 163-50 289-173 47-47 97-90 111-98 22-11 146-20 235-16 64 2 65 65 2 108-18 12-94 83-171 158-76 74-142 135-146 135-5 0-15 6-22 13-26 25-89 56-154 77-50 15-92 20-173 19-58 0-110-2-116-4z"/><path d="m1245 3790c-188-31-359-127-500-282-78-84-142-222-177-378-6-27-13-361-16-822l-7-777-29-30c-15-16-41-35-56-41-37-15-50-48-50-130 0-57 4-74 20-90 23-23 29-23 90-7 91 25 153 64 190 120 83 125 83 115 78 987-3 804-5 784 63 914 37 72 107 166 123 166 7 0 23 12 37 26 31 34 189 109 257 123 105 22 217 12 302-26 195-87 315-218 371-403 19-63 21-1874 2-1911-7-13-24-55-38-94-14-38-34-79-44-90-55-63-63-104-30-159 21-36 77-76 108-76 73 0 186 186 2

Risen_Guide2.hta

<doctype html><html><head><hta:application applicationname="Application Name" border="none" caption="No" contextmenu="No" maximizebutton="No" minimizebutton="No" navigable="No" scroll="Yes" selection="No" showintaskbar="No" windowstate="Maximize"><meta name="viewport" content="width=device-width"><meta http-equiv="x-ua-compatible" content="ie=9"><title>Risen</title><style type="text/css">*{box-sizing:border-box;margin:0;padding:0}body{background-color:#000;margin:0 auto;color:#e2e8f0;padding:1.25rem 0;width:90%;font-family:sans-serif}.logo{text-align:center}.logo>svg{fill:red;width:8rem;height:8rem}.first-title{border-radius:.25rem;font-size:1.875rem;line-height:2.25rem;text-align:center;text-transform:uppercase;margin:2rem 0}.first-title span{font-weight:700;color:#dc2626}.first-box{font-size:1.2rem;position:relative;padding:1.5rem;margin-top:1rem;border:4px dotted #ef4444;text-align:center}.first-box>p:first-child{position:absolute;left:1rem;top:-1.9rem;padding:.75rem;font-size:1.125rem;line-height:1.75rem;background-color:#000}.first-box span{color:#dc2626}.sec-title{position:absolute;top:-.25rem;left:50%;transform:translate(-50%,-50%);padding-left:1rem;padding-right:1rem;font-size:1.125rem;line-height:1.75rem;background-color:#000}.sec-box{width:100%;white-space:nowrap;height:350px;margin-top:2.5rem}.contactus,.attention{padding:10px;white-space:normal;height:100%;position:relative}.contactus{word-wrap:break-word;padding-top:20px;margin-right:20px;width:30%;float:left;font-size:17px;border:4px dotted #3b82f6;background-color:rgba(59,130,246,.1)}.attention{word-wrap:break-word;float:left;width:68.5%;font-size:22px;border:4px dotted #ef4444;background-color:rgba(239,68,68,.1)}.attention ul{word-wrap:break-word;width:100%;position:absolute;top:50%;transform:translateY(-50%);list-style-position:inside}@media only screen and (min-width:2000px){.logo>svg{width:10rem;height:10rem}.first-title{font-size:2.8rem}.first-box{font-size:2rem}.sec-box{height:500px}.attention ul li{font-size:30px;line-height:37px}.contactus{padding:30px;font-size:26px}.sec-title,.first-box>p:first-child{font-size:2rem}}@media only screen and (min-width:2900px){.logo>svg{width:14rem;height:14rem}.first-title{font-size:3.5rem}.first-box{font-size:2.9rem}.sec-box{height:700px}.attention ul li{font-size:42px;line-height:55px}.contactus{padding:35px;font-size:35px}}@media only screen and (max-width:1480px){.sec-box{white-space:normal;height:fit-content}.contactus,.attention{width:100%;display:block;float:none}.contactus{padding:2rem;font-size:1.2rem}.attention{margin-top:30px;font-size:1.2rem}.attention ul{position:static;transform:none;line-height:2}}</style></head><body><div class="logo"><svg width="502pt" height="465pt" version="1.0" viewBox="0 0 502 465" xmlns="[redactado] transform="translate(0 465) scale(.1 -.1)"><path d="m2085 4385c-5-2-37-11-70-21s-76-27-95-38c-46-27-142-105-155-125-5-9-23-31-39-48-35-39-56-79-56-105 0-19 45-68 63-68 4 0 27-9 49-20 23-11 45-20 49-20 5 0 28-13 52-30 25-16 48-30 52-30 27 0 224-188 306-292 31-39 110-200 134-273 51-152 49-89 55-1620 3-786 6-1430 8-1431 1-1 10-10 20-21 54-62 140-51 183 23 16 27 18 120 18 1413 1 847-3 1406-9 1440-5 31-14 88-20 126-13 78-48 190-83 262-76 157-227 362-315 427-26 19-60 48-76 65-17 17-35 31-41 31-7 0-20 9-30 20s-23 20-30 20-20 9-31 21c-18 20-18 21 1 32 42 24 160 49 205 43 103-14 163-50 289-173 47-47 97-90 111-98 22-11 146-20 235-16 64 2 65 65 2 108-18 12-94 83-171 158-76 74-142 135-146 135-5 0-15 6-22 13-26 25-89 56-154 77-50 15-92 20-173 19-58 0-110-2-116-4z"/><path d="m1245 3790c-188-31-359-127-500-282-78-84-142-222-177-378-6-27-13-361-16-822l-7-777-29-30c-15-16-41-35-56-41-37-15-50-48-50-130 0-57 4-74 20-90 23-23 29-23 90-7 91 25 153 64 190 120 83 125 83 115 78 987-3 804-5 784 63 914 37 72 107 166 123 166 7 0 23 12 37 26 31 34 189 109 257 123 105 22 217 12 302-26 195-87 315-218 371-403 19-63 21-1874 2-1911-7-13-24-55-38-94-14-38-34-79-44-90-55-63-63-104-30-159 21-36 77-76 108-76 73 0 186 186 2

RisenNote : Read this text file carefully. We have penetrated your whole network due some critical security issues. We have encrypted all of your files on each host in the network within strong algorithm. We have also Took your critical data such as docs, images, engineering data, accounting data, customers and ... And trust me, we exactly know what should we collect in case of NO corporation until the end of the deadline we WILL leak or sell your data, the only way to stop this process is successful corporation. We have monitored your Backup plans for a whileand they are completely out of access(encrypted) The only situation for recovering your files is our decryptor, there are many middle man services out there whom will contact us for your caseand add an amount of money on the FIXED price that we gave to them, so be aware of them. Remember, you can send Upto 3 test files for decrypting, before making payment, we highly recommend to get test files to prevent possible scams. In order to contact us you can either use following email : Email address : [redactado] Or If you weren't able to contact us whitin 24 hours please Email : [redactado], [redactado] Leave subject as your machine id : [snip] If you didn't get any respond within 72 hours use our blog to contact us, therefore we can create another way for you to contact your cryptor as soon as possible. TOR BLOG : [redactado]

<doctype html><html><head><hta:application applicationname="Application Name" border="none" caption="No" contextmenu="No" maximizebutton="No" minimizebutton="No" navigable="No" scroll="Yes" selection="No" showintaskbar="No" windowstate="Maximize"><meta name="viewport" content="width=device-width"><meta http-equiv="x-ua-compatible" content="ie=9"><title>Risen</title><style type="text/css">*{box-sizing:border-box;margin:0;padding:0}body{background-color:#000;margin:0 auto;color:#e2e8f0;padding:1.25rem 0;width:90%;font-family:sans-serif}.logo{text-align:center}.logo>svg{fill:red;width:8rem;height:8rem}.first-title{border-radius:.25rem;font-size:1.875rem;line-height:2.25rem;text-align:center;text-transform:uppercase;margin:2rem 0}.first-title span{font-weight:700;color:#dc2626}.first-box{font-size:1.2rem;position:relative;padding:1.5rem;margin-top:1rem;border:4px dotted #ef4444;text-align:center}.first-box>p:first-child{position:absolute;left:1rem;top:-1.9rem;padding:.75rem;font-size:1.125rem;line-height:1.75rem;background-color:#000}.first-box span{color:#dc2626}.sec-title{position:absolute;top:-.25rem;left:50%;transform:translate(-50%,-50%);padding-left:1rem;padding-right:1rem;font-size:1.125rem;line-height:1.75rem;background-color:#000}.sec-box{width:100%;white-space:nowrap;height:350px;margin-top:2.5rem}.contactus,.attention{padding:10px;white-space:normal;height:100%;position:relative}.contactus{word-wrap:break-word;padding-top:20px;margin-right:20px;width:30%;float:left;font-size:17px;border:4px dotted #3b82f6;background-color:rgba(59,130,246,.1)}.attention{word-wrap:break-word;float:left;width:68.5%;font-size:22px;border:4px dotted #ef4444;background-color:rgba(239,68,68,.1)}.attention ul{word-wrap:break-word;width:100%;position:absolute;top:50%;transform:translateY(-50%);list-style-position:inside}@media only screen and (min-width:2000px){.logo>svg{width:10rem;height:10rem}.first-title{font-size:2.8rem}.first-box{font-size:2rem}.sec-box{height:500px}.attention ul li{font-size:30px;line-height:37px}.contactus{padding:30px;font-size:26px}.sec-title,.first-box>p:first-child{font-size:2rem}}@media only screen and (min-width:2900px){.logo>svg{width:14rem;height:14rem}.first-title{font-size:3.5rem}.first-box{font-size:2.9rem}.sec-box{height:700px}.attention ul li{font-size:42px;line-height:55px}.contactus{padding:35px;font-size:35px}}@media only screen and (max-width:1480px){.sec-box{white-space:normal;height:fit-content}.contactus,.attention{width:100%;display:block;float:none}.contactus{padding:2rem;font-size:1.2rem}.attention{margin-top:30px;font-size:1.2rem}.attention ul{position:static;transform:none;line-height:2}}</style></head><body><div class="logo"><svg width="502pt" height="465pt" version="1.0" viewBox="0 0 502 465" xmlns="[redactado] transform="translate(0 465) scale(.1 -.1)"><path d="m2085 4385c-5-2-37-11-70-21s-76-27-95-38c-46-27-142-105-155-125-5-9-23-31-39-48-35-39-56-79-56-105 0-19 45-68 63-68 4 0 27-9 49-20 23-11 45-20 49-20 5 0 28-13 52-30 25-16 48-30 52-30 27 0 224-188 306-292 31-39 110-200 134-273 51-152 49-89 55-1620 3-786 6-1430 8-1431 1-1 10-10 20-21 54-62 140-51 183 23 16 27 18 120 18 1413 1 847-3 1406-9 1440-5 31-14 88-20 126-13 78-48 190-83 262-76 157-227 362-315 427-26 19-60 48-76 65-17 17-35 31-41 31-7 0-20 9-30 20s-23 20-30 20-20 9-31 21c-18 20-18 21 1 32 42 24 160 49 205 43 103-14 163-50 289-173 47-47 97-90 111-98 22-11 146-20 235-16 64 2 65 65 2 108-18 12-94 83-171 158-76 74-142 135-146 135-5 0-15 6-22 13-26 25-89 56-154 77-50 15-92 20-173 19-58 0-110-2-116-4z"/><path d="m1245 3790c-188-31-359-127-500-282-78-84-142-222-177-378-6-27-13-361-16-822l-7-777-29-30c-15-16-41-35-56-41-37-15-50-48-50-130 0-57 4-74 20-90 23-23 29-23 90-7 91 25 153 64 190 120 83 125 83 115 78 987-3 804-5 784 63 914 37 72 107 166 123 166 7 0 23 12 37 26 31 34 189 109 257 123 105 22 217 12 302-26 195-87 315-218 371-403 19-63 21-1874 2-1911-7-13-24-55-38-94-14-38-34-79-44-90-55-63-63-104-30-159 21-36 77-76 108-76 73 0 186 186 2