What is Cyberpunk Ransomware?

Cyberpunk ransomware is a newly discovered strain belonging to the Dharma ransomware family of clones.

Cyberpunk encrypts files and changes the filenames, adding a complex new extension. The new extension consists of the victim ID string, the email used by the hacker for contact and the ".CYBER" string.

The encryption process will turn a file called "document.txt" into "document.txt.id-[alphanumeric string].[cyberpunk@onionmail.org].CYBER".

The ransomware drops its ransom note inside a file called "CYBER.txt". A pop-up window is also displayed, containing a longer version of the note that goes as follows:

YOUR FILES ARE ENCRYPTED

cyberpunk

Don't worry, you can return all your files!

If you want to restore them, write to the mail: cyberpunk at onionmail dot org YOUR ID -

If you have not answered by mail within 12 hours, write to us by another mail:cyberpsycho at msgsafe dot io

ATTENTION!

We recommend you contact us directly to avoid overpaying agents

Do not rename encrypted files.

Do not try to decrypt your data using third party software, it may cause permanent data loss.

Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.