Threat Database Ransomware Fisakalzb Ransomware

Fisakalzb Ransomware

The Fisakalzb malware threat exhibits the typical characteristics associated with ransomware. It is equipped with a strong encryption algorithm that it uses to lock the data of its victims. Numerous file types stored on the infected devices - documents, archives, databases, photos, PDFs, audio and video files, etc., will be locked and become inaccessible. The '.fisakalzb' extension will be attached to the original name of each impacted file. According to an analysis by cybersecurity experts, Fisakalzb is a variant of the Snath Ransomware threat.

Afterward, the threat will create a text file named 'HOW TO RESTORE YOUR FILES.TXT.' The file contains a ransom note with instructions for the victims. According to the message, the attackers are willing to decrypt up to 3 files for free. The chosen files must meet some requirements - they should not be more than 1 MB in size and must not contain any valuable information. To receive additional details, the affected users or organizations are directed toward contacting the cybercriminals. Two email addresses - 'NeilAlden1Armstrong14@swisscows.email' and 'JohniFlex@airmail.cc,' and a Tox chat account are provided in the ransom note.

The full text of Fisakalzb Ransomware's message is:

'Hello!

All your files are encrypted!

Email me if you want to get your files back - I will do it very quickly!
Contact me by email:

NeilAlden1Armstrong14@swisscows.email or JohniFlex@airmail.cc

The subject line must contain an encryption extension or the name of your company!
Do not rename encrypted files, you may lose them forever.
You may be a victim of fraud. Free decryption as a guarantee.
Send us up to 3 files for free decryption.
The total file size should be no more than 1 MB! (not in the archive), and the files should not contain valuable information. (databases, backups, large Excel spreadsheets, etc.)

To contact us, we recommend that you create an email address at protonmail.com or tutanota.com
Because gmail and other public email programs can block our messages!

If you do not receive a response from us for a long time, check your spam folder.

=================================

Customer service TOX ID: 0FF26770BFAEAD95194506E6970CC1C395 B04159038D785DE316F05CE6DE67324C6038727A58
Only emergency! Use if support is not responding'

Trending

Most Viewed

Loading...