Tkoinprz Ransomware
The Tkoinprz Ransomware is a ransomware threat that can wreak havoc on the victim's computer if it manages to infiltrate it successfully. The Tkoinprz Ransomware uses strong cryptographical algorithms to encrypt the files stored on the affected computer and demands a ransom for their potential restoration. Cybersecurity researchers have determined that the Tkoinprz Ransomware is not a wholly unique threat and instead it can be categorized as being a part of the Snatch Ransomware family.
The Tkoinprz Ransomware renames every successfully encrypted file by appending '.tkoinprz' as a new extension to the original filename. The ransom note of the threat is stored in a text file named 'HOW TO RESTORE YOUR FILES.TXT' that is dropped in every folder contained locked files. The victims of Tkoinprz Ransomware are instructed to contact the cybercriminals on one of two email addresses - support911@cock.li or Xilttbg@Tutanota.com. Three encrypted files with a combined size of no more than 1MB can be sent to the hackers for free decryption.
Unfortunately, there are no publicly available decryption tools for the Tkoinprz Ransomware at the moment. Users affected by this threat are advised to use a legitimate anti-malware program to clean the infected machine as soon as possible.
The full text of the ransom note of Tkoinprz is:
'Hello!
All your files are encrypted, write to me if you want to return your files - I can do it very quickly!
Contact me by email:
support911@cock.li or Xilttbg@Tutanota.com
The subject line must contain an encryption extension or the name of your company!
Do not rename encrypted files, you may lose them forever.
You may be a victim of fraud. Free decryption as a guarantee.
Send us up to 3 files for free decryption.
The total file size should be no more than 1 MB! (not in the archive), and the files should not contain valuable information. (databases, backups, large Excel spreadsheets, etc.)
!!! Do not turn off or restart the NAS equipment. This will lead to data loss !!!'
