Order number 06567592

Am Mittwoch, den 09. März 2016 wurde durch unbekannte Dritte die folgende E-Mail in englischer Sprache versendet:

20160309_order_number

Respected Customer,

We will arrange the best delivery of your package in the shortest manner, as our head office has received the payment of $ 749,17 .

Information regarding your order and promotional offer can be found in the attachment down below.

Sincerely,
Horacio palin
524 Mimosa Blvd # 524
Forks, WA 53053
Phone: 196-827-6573

 

Der E-Mail ist eine Datei „Invoice_ref-06567592.zip“ beigefügt, die ein JavaScript (.js) enthält. Das JavaScript lädt den Verschlüsselungs- und Erpressungstrojaner TeslaCrypt aus dem Internet.

 

20160309_last_payment_bild

 

20160309_last_payment_html

 

NOT YOUR LANGUAGE? USE https://translate.google.com

What happened to your files ?
All of your files were protected by a strong encryption with RSA4096
More information about the encryption keys using RSA4096 can be found here: http://en.wikipedia.org/wiki/RSA_(cryptosystem)

How did this happen ?
!!! Specially for your PC was generated personal RSA4096 Key , both public and private.
!!! ALL YOUR FILES were encrypted with the public key, which has been transferred to your computer via the Internet.
!!! Decrypting of your files is only possible with the help of the private key and decrypt program , which is on our Secret Server

What do I do ?
So , there are two ways you can choose: wait for a miracle and get your price doubled, or start obtaining BITCOIN NOW! , and restore your data easy way
If You have really valuable data, you better not waste your time, because there is no other way to get your files, except make a payment

For more specific instructions, please visit your personal home page, there are a few different addresses pointing to your page below:
* http:// rbg4hfbilrf7to452p89hrfq.boonmower[.]com/****
* http:// irhng84nfaslbv243ljtblwqjrb.pinnafaon[.]at/****
* http:// t54ndnku456ngkwsudqer.wallymac[.]com/****
If for some reasons the addresses are not available, follow these steps
1 Download and install tor-browser: http://www.torproject.org/projects/torbrowser.html.en
2 After a successful installation, run the browser
3 Type in the address bar: xlowfznrg4wf7dli.onion/****
4 Follow the instructions on the site

IMPORTANT INFORMATION
Your personal pages
http:// rbg4hfbilrf7to452p89hrfq.boonmower[.]com/****
http:// irhng84nfaslbv243ljtblwqjrb.pinnafaon[.]at/****
http:// t54ndnku456ngkwsudqer.wallymac[.]com/****
Your personal pages TOR Browser xlowfznrg4wf7dli. onion/****

 

20160309_last_payment_web

Kommentar(e)

Schreibe einen Kommentar

Deine E-Mail-Adresse wird nicht veröffentlicht. Erforderliche Felder sind mit * markiert.