ACSec/Observatorio
← Notas de rescate

Notas de rescate — thegentlemen

Contactos, enlaces de pago y direcciones del atacante redactados ([redactado]).

README-GENTLEMEN.txt

[snip] = YOUR ID
Gentlemen, your network is under our full control.
All your files are now encrypted and inaccessible.
1. Any modification of encrypted files will make recovery impossible.
2. Only our unique decryption key and software can restore your files.
   Brute-force, RAM dumps, third-party recovery tools are useless.
   It’s a fundamental mathematical reality. Only we can decrypt your data.
3. Law enforcement, authorities, and “data recovery” companies will NOT help you.
   They will only waste your time, take your money, and block you from recovering your files — your business will be lost.
4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network.
5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc).
   If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks.
[redactado] CONTACT - RECOVER YOUR FILES
Contact us (add via [redactado] ID): [redactado]
Download [redactado] messenger: [redactado]
COOPERATE TO PREVENT DATA LEAK (239 HOURS LEFT)
Check our blog: [redactado]
Download Tor browser: [redactado]
Any other means of communication are fake and may be set up by third parties.
Only use the methods listed in this note or on the specified website.

README-GENTLEMEN_2.txt

[snip] = YOUR ID
Gentlemen, your network has been encrypted.
1. Any modification of encrypted files will make recovery impossible.
2. Only our unique decryption key and software can restore your files.
   Brute-force, RAM dumps, third-party recovery tools are useless.
   It’s a fundamental mathematical reality. Only we can decrypt your data.
3. Law enforcement, authorities, and “data recovery” companies will NOT help you.
   They will only waste your time, take your money, and block you from recovering your files — your business will be lost.
4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network.
5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc).
   If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks.
   In addition, it will be reported to the relevant data protection authorities and regulators.
   This may result in official investigations, significant fines, and reputational damage for your company.
6. We guarantee 100% file recovery to their original state, bit by bit.
   To demonstrate the quality of our work, you can provide three sample files, and we will restore them free of charge.
[redactado] CONTACT - RECOVER YOUR FILES
Contact us (add via [redactado] ID): [redactado]
Download [redactado] messenger: [redactado]
Contact us (add via [redactado] ID): [redactado]
Download [redactado]  [redactado]
СONTACT TO PREVENT DATA LEAK (7 DAYS BEFORE YOUR COMPANY DATA WILL BE PUBLISHED IN OUR BLOG, WITH 239 HOURS REVEAL TIMER)
Check our blog: [redactado]
Download Tor browser: [redactado]
Follow us on X: [redactado]
Any other means of communication are fake and may be set up by third parties.
Only use the methods listed in this note or on the specified website.
After adding (us) in [redactado] or [redactado] please wait for your request to be processed and stay online.
If you do not receive a reply within 36 hours, create another account and contact us again.
In your first message in chat, immediately provide your ID from the note and the name of your organization.
Assign one person as contact responsible for all negotiations. Do not create multiple chats.
Notas: thegentlemen | ACSec Observatorio Ransomware