Threat Database Ransomware GoNNaCry Ransomware

GoNNaCry Ransomware

Infosec researchers have detected a new threatening ransomware named GoNNaCry that has been released in the wild. Users infected by the GoNNaCry Ransomware will have their files encrypted with an uncrackable cryptographic algorithm. As a result, photos, documents, databases, archives, etc. stored on the compromised system will become inaccessible and unusable. The affected files will have '.GoNNaCry' appended to their original names as a new extension. Upon completing its encryption process, the threat will drop its ransom note in a file named 'GoNNaCry.html.' 

According to the instructions, the cybercriminals responsible for unleashing the GoNNaCry Ransomware want to receive the sum of $400 payable in Bitcoin, in exchange for the private decryption key needed for the restoration of the locked files. The money must be transferred to the provided crypto wallet address. Afterward, victims are told to send a message to the 'GoNNaCrypt@protonmail.com' email address. The message must contain the transaction link for the Bitcoin transfer and the public key found inside the ransom note. In addition, affected users can attach two files no bigger than 2MB that will supposedly be decrypted for free. 

To scare users into meeting their demands, the hackers threaten that 48 hours after the ransomware infection the sum they want to be paid will be doubled. After a period of another 48 hours, all encrypted files will become unsalvageable apparently. 

Dealing with a ransomware attack is stressful incredibly. However, entering into negotiations and sending any amount of money to the hackers, is not recommended. Users face exposing themselves to additional security risks while the cybercriminals can simply take the money and move on without providing any decryption key or software tools. 

The full text of GoNNaCry Ransomware's note is:

'Ooops ! All your important files are encrypted.
What happened to my computer ?

Many of your documents, photos, videos, database and all other files are no longer accessible
because they have been encrypted by strong encryption algorithm.
Maybe you're busy looking for a way to recover your files but, do not waste your time, no one can't recover your files without our decryption service.

Can i recover my files ?

Sure! we guarantee you can recover all your files safe and easily but, your time is running out.
Payment is accepted in bitcoin only for more information please visit hxxps://en.wikipedia.org/wiki/Bitcoin
If you don't know where to buy bitcoin please visit hxxps://en.wikipedia.org/wiki/Bitcoin
Even if you need more help feel free to contact us.

Before and after the payment ?

First, Make sure to buy $400 amount of bitcoin and then you have to send it to following Wallet Address:
bc1qzjjyuxnxx0nxuljfhk4m79pge5qj66mdlff36q
After payment you have to contact us by following email address: GoNNaCrypt@protonmail.com
Your Public key: -
Public key is required to identify your computer details.
Send a message contain your transaction link and the public key and wait for our response.

Notice:

After 48 hours of displaying this message, the price will be raised (doubled).
The next 48 hours you will lost all your files !
Do not shutdown or restart your system, until you didn't make the payment.
For proof of work you can send 2 files equal or less than 2 MB for us to recover and send back to you.
Some of your computer features is unavailable right now, don't try to use them =)
A regular bitcoin transaction can take a several hour for confirmation.
For more information and contact us feel free to send an email. GoNNaCrypt@protonmail.com

There is unequal amount of good and bad in most things, the trick is to figure out the ratio and act accordingly.
Best regards - #GoNNaCry
.'

Trending

Most Viewed

Loading...