Piton Ransomware
Cybercriminals have released a new variant of ransomware. The name of this new malware is Piton and it follows a ransomware operation plan typical of the previously detected Babuk Locker Ransomware threat, of which the Piton Ransomware is a variant. First, it is deployed to the fraudulently targeted computer, where the threat initiates an encryption process that will lock most of the victim's files. Documents, PDFs, files, databases, images, photos, etc. they will all be rendered inaccessible and unusable.
Each affected file will have '.piton' appended to its original name as a new extension. When the threat has finished locking the targeted files, it will deliver a ransom note to the system's desktop. The ransom-demanding message will be placed inside a newly created text file named 'Help Restore Your Files.txt.'
Ransom Note's Details
The file dropped on the compromised system contains the same message translated in four different languages - English, Spanish, Russian and Portuguese. However, the instructions left by the hackers lack most of the vital details that victims of the attack would want to know. The message simply states that the locked files can be recovered by paying the cybercriminals for their decryption tool and key. Only a single email address - support.3330@gmail.com, is mentioned as a way to communicate with the attackers.
The full note is:
'-----------------------------------
ATTENTION!
Don't worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you. Piton 1.0
This software will decrypt all your encrypted files.
To get the decryptor send an email to
support.3330@gmail.com
-----------------------------------
¡ATENCIÓN!
¡No se preocupe, puede devolver todos sus archivos!
Todos sus archivos, como fotos, bases de datos, documentos y otros importantes, están cifrados con el cifrado más fuerte y la clave única.
El único método para recuperar archivos es comprar una herramienta de descifrado y una clave única para usted. Piton 1.0
Este software descifrará todos sus archivos cifrados.
Para obtener el descifrador, envíe un correo electrónico a
support.3330@gmail.com
-----------------------------------
ВНИМАНИЕ!
Не волнуйтесь, вы можете вернуть все свои файлы!
Все ваши файлы, такие как фотографии, базы данных, документы и другие важные файлы, зашифрованы с помощью самого надежного шифрования и уникального ключа.
Единственный способ восстановить файлы - это приобрести для вас инструмент дешифрования и уникальный ключ. Питон 1.0
Это программное обеспечение расшифрует все ваши зашифрованные файлы.
Чтобы получить дешифратор, отправьте электронное письмо по адресу
support.3330@gmail.com
-----------------------------------
ATENÇÃO!
Não se preocupe, você pode devolver todos os seus arquivos!
Todos os seus arquivos como fotos, bancos de dados, documentos e outros importantes são criptografados com a criptografia mais forte e chave exclusiva.
O único método de recuperação de arquivos é comprar uma ferramenta de descriptografia e uma chave exclusiva para você. Piton 1.0
Este software irá descriptografar todos os seus arquivos criptografados.
Para obter o descriptografador, envie um e-mail para
support.3330@gmail.com
-----------------------------------'
