Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

LockBit 3.0 Black / CriptomanGizmo ([random 9 chars]; README.txt) Support Topic


  • Please log in to reply
290 replies to this topic

#286 Gredde

Gredde

  •  Avatar image
  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:01:07 PM

Posted 02 July 2024 - 03:07 AM

Hello @Rivitna

 

Can you kindly help me ?

I attached the encrypted file and the readme text

Thank you Rivitna

 

HCTFstsAz.README

https://drive.google.com/drive/folders/1xMkW_OodqgQd6rXvFPsqtUc6T_HH14dT?usp=drive_link



BC AdBot (Login to Remove)

 


#287 rivitna

rivitna

  •  Avatar image
  • Security Colleague
  • 279 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:07 AM

Posted 02 July 2024 - 04:05 AM

Gredde

 

Unfortunately, I don't have this private key (HCTFstsAz) yet.



#288 forteexe21

forteexe21

  •  Avatar image
  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:11:07 AM

Posted Yesterday, 02:39 AM

Sorry if its too recent since my last post but using the tool from nomoreransom, check_decrypt.exe says some of my files are decryptable but it says i need to provide company information including an ICT representative?



#289 doctae

doctae

  •  Avatar image
  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:03:07 AM

Posted Yesterday, 02:46 PM

Hello rivitna, 

Got attacked this morning:

 

!!! ALL YOUR FILES ARE ENCRYPTED!!! All your files, documents, photos, databases and other important files are encrypted. The only way to recover your files is to get a decryptor. To get the decryptor, write to us by mail or telegram, specify the ID of the encrypted files in the letter: Email: returnback@cyberfear.com Telegram: https://t.me/returnbackcyberfearcom Warning!!! * Do not rename files. * Do not attempt to decrypt data using third party software, as this may result in permanent data loss. * Do not contact other people, only we can help you and recover your data. Your personal decryption ID: lGiKf865

 

 

Any advice is much appreciated.
 

 

Attached Files



#290 rivitna

rivitna

  •  Avatar image
  • Security Colleague
  • 279 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:07 AM

Posted Yesterday, 07:15 PM

doctae

Your files are encrypted using an unknown ransomware. It isn't LockBit 3 (Black)

 

Please check your decrypted files

Attached Files


Edited by rivitna, Yesterday, 07:28 PM.


#291 doctae

doctae

  •  Avatar image
  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:03:07 AM

Posted Today, 12:21 AM

Thank you






4 user(s) are reading this topic

2 members, 2 guests, 0 anonymous users


    Azzie86, mkqqq