Genesis Ransomware
The Genesis Ransomware is a potent crypto locker threat that looks like it does not belong to an already established ransomware family. The threat still operates as a typical representative of this type of malware, though. Its goal is to infect the targeted computer successfully, followed by the initiation of an encryption algorithm that will leave users unable to access their own files. The Genesis Ransomware will append '.genesis' as a new extension to the native name of every file it encrypts. Besides, a text file named '!HELP!.txt' and containing a ransom note with instructions for the victims will be dropped in every folder with compromised files.
According to the note, the Genesis threat has not only encrypted nearly all of the victim's files but that it also has managed to exfiltrate unspecified sensitive information found on the computer. The hackers then threaten to make that information public if their demands are not met. The cybercriminals allow affected users to send two encrypted files that will be decrypted for free. For that purpose, they provide two email addresses that should be used as communication channels - 'genesishelp@mail.ee' and 'genesishelp@cock.li.'
The full set of instructions left by the criminals behind the Genesis Ransomware threat is:
'Hello.
If you are reading this, it means your data is encrypted and your private sensivitive information was stolen!
Read carefully the whole instructions to avoid problems with your data.
You have to contact us immediately to resolve this issue and make a deal!
!!!WARNING!!!
DO NOT modify, rename, copy or move any file. You can DAMAGE them and decryption will be impossible!
DO NOT use any third-party or public decryption software, it also may DAMAGE files.
There is ONLY ONE possible way to get back your files.
Do not waste your time, contact us and pay for special DECRYPTION TOOL. The tool is all you need.
For your guarantee we can decrypt 2 of your text or image files for free, as a proof that it works.
Your network was fully COMPROMISED! We can discuss how to secure it as a bonus.
The data that we gathered could be published in MASS MEDIA for BREAKING NEWS!
If we make a deal everything would be kept in secret and all your data will be restored.
I could make them public them if you decide not to pay.
Contact us immediately:
genesishelp@mail.ee
genesishelp@cock.li
Your Personal ID:'
