TiNx Ransomware
TiNx Ransomware is a crypt locker malware that, according to the experts who analyzed its underlying code, is not a wholly unique threat. Instead, it belongs to the Xorist family of ransomware threats. TiNx Ransomware's behavior diverges from what is considered to be the norm for these malware only slightly. The TiNx Ransomware attempts to sneak into the victim's computer and then uses strong encryption algorithms to "lock" all the user's files effectively. Photos, videos, documents, databases, etc. will be rendered unusable, and a ransom is demanded to their restoration. When the TiNx Ransowamre encrypts a file successfully, it appends '.TiNx' as a new extension to the original filename. The TiNx Ransomware takes an extra step when it comes to ensuring that the affected users will notice its ransom note; it drops a text file named "HOW TO DECRYPT FILES.txt" in every folder containing encrypted files, changes the wallpaper of the infected machine with an image with the ransom note, and generates a pop-up window with the same text.
If they want their files to be decrypted, all the TiNx Ransomware victims are instructed to send the sum of 0.1 Bitcoin to a cryptocurrency wallet controlled by the cybercriminals. The email left for contact is tinxony@protonmail.com, but victims should use it only after making the payment. In addition, "TINXONYV01-3918293-2020" should be used as a subject for the email. The full text of the ransom note is:
'In your attention!!
Hello, your server is very vulnerable, that's why you became a victim of ransomware
All your files are currently encrypted
However, there is also good news, the files can be decrypted if you pay 0.1 bitcoin.
All you have to do is follow the steps below.
Buy 0.1 bitcoin, you can easily buy bitcoin from this sites:
www.localbitcoins.com
www.paxful.com
Send the amount to this wallet: 16hQHgAjJTR7purjyJazdEmup8GRWEGhUV
After submitting, contact me at this email address: tinxony@protonmail.com
With this subject: TINXONYV01-3918293-2020
Immediately after this you will receive an email with the keys and a small tutorial for decrypting the files.
Here's another list of where to buy bitcoin:
hxxps://bitcoin.org/en/exchanges.'
