TeslaRVNG3 Ransomware
The data on our computers and devices has become a regular target for unscrupulous cybercriminals. Through the use of specialized ransomware threats, the hackers aim to lock their victims’ files and then extort the users for money. One such threat that has been identified by the infosec community is the TeslaRVGN3 Ransomware. It uses a strong encryption algorithm, ensuring that the files it locks will not be recovered without access to the required decryption keys.
As part of its intrusive activities on the infected system, the TeslaRVGN3 Ransomware also changes the original names of the files it encrypts. First, the threat adds a string used as the unique ID assigned to the victim, followed by an email address to the front of the file's name. At the same time, it appends '.teslarvgn3' as a new file extension. Finally, TeslaRVGN3 will create a file named 'teslarvng3.hta,' which is used to carry the threat's ransom note.
Ransom Note's Details
The instructions from the attackers reveal that the demanded ransom must be paid using the Bitcoin cryptocurrency. It also states that victims who wish to restore their files must establish contact with the cybercriminals by contacting both of the provided email addresses - 'titnbest@mailfence.com' and 'titn@tutanota.com.' The hackers, apparently, also are willing to decrypt a couple of files, as a demonstration of their ability to recover the victim's data. The rest of the note consists of various warnings, such as advising users against hiring an intermediary company, as that could only result in increased monetary losses without any tangible results.
The full text of the note is:
'TESLARVNG3
all data in your machine turned to useless binary code
to return email us at : titnbest@mailfence.com , titn@tutanota.com (send copy to both, your id as subject)
your id :tips:
no one else can decrypt/recover for you, don't waste your business time
anyone/any company offering help will contact us and intermediate, even if they claim otherwise, math prooves no one can decrypt without our private keys ,even some of them with good fame get test file from us and scam you (get your money, don't pay us, tell you some bullshit, and leave you with your encrypted data) the other half get only some extra fees from you (someone them they pick large amounts of your payment for themselves), there's nothing you can't do yourself
you can buy bitcoins easily , just google : how to buy bitcoins in xxx (your country)
Whats's guarantee? 1- you send a few Sample files for a teest before payment 2-if we don't recover our reputation our will go bad and no one will pay us
dont play with encrypted files that will corrupt them and make them unrecoverable.
for proper decryption don't delete files at c:\teslarvng2 hidden folder , even on machines with no important data , or get backup of them
question : i read at some websites that some people pay the ransome and don't get their files answer: yes that happens with some ransomewares, affiliates scam you to not pay percentage to devs , to avoid it never pay anyone without testfile (us or any dealer),never ever pay outside of this 2 emails,ONLY PAY TO THE WALLET ADDRESS YOU RECEIVE WITH DECRYPTED SAMPLE FILE ,scam can't happen if this tips are followed , guaranteed.
use google translate (if you don't know english).'
