What does HARDBIT Ransomware Do To Your Computer?

A new release of file-encrypting malware was spotted in the wild in October 2022. The new ransomware is called simply HARDBIT.

HARDBIT will encrypt most files on the targeted system, leaving their contents scrambled and unreadable. Encrypted files are renamed to include the victim ID, the contact email used by the ransomware operator, and the ".hardbit" string.

The HARDBIT ransomware will create two separate files related to the ransom demands, named "Help_me_for_Decrypt.hta" and "How To Restore Your Files.txt". The .hta file is displayed inside an automatic pop-up window and contains the following lengthy ransom note:

HARDBIT

!!ALL YOUR IMPORTANT FILES ARE STOLEN AND ENCRYPTED!!

All your files have been encrypted due to a security problem with your PC.

If you want to restore them, please send your ID for us

Our contact information is written in file (HOW TO RESTORE YOUR FILES).

Please read this file carefully so as not to make a mistake.

You have to 48 hours(2 Days) To contact or paying us After that, you have to Pay Double.

We need your ID and your ID is written below the help file

Please do not touch the Key written under the help file in any way, otherwise the consequences will be with you

Introducing TOX messengers

•You can download and install TOX message from this link hxxps://tox.chat/

•Our ID in TOX: [alphanumeric strings].

•We are ready to answer your questions!

•If you have information about the company and its servers, share with us in TOX and receive a share from us when they pay. Don't worry, your identity will remain hidden.

Is there a guarantee for decryption after payment?

•Before paying you can send us up to 2 test files for free decryption. The total size of files must be less than 1Mb (non archived), and files should not contain valuable information. (databases,backups, large excel sheets, etc.)

Attention!

•DO NOT trust anyone except the email and the TOX ID that is in the help file, otherwise we will not be responsible for the consequences.

•DO NOT rename encrypted files.

•DO NOT try to decrypt or manipulate the files yourself.

•Do Not contact intermediary companies. They don't do anything special, they just message us and give us money and get the key, but if our price was $50,000, they will charge $70,000 from you.

•Do not pay any money for the test file.

•Before manipulating the files, be sure to make a backup of them, otherwise it is your responsibility.