Rever Ransomware Lists No Ransom Demands
Rever ransomware is the name of a new strain of file-encrypting malware. There are no indicators that the new variant belongs to any of the big ransomware families.
The Rever ransomware encrypts files, appending a new extension to them that consists of eight random alphanumeric characters. This will transform a file named "document.doc" into something similar to "document.doc.76EJK01B" upon encryption.
Affected file formats include media, document, archive and database files. Encrypted files become unopenable.
The ransomware drops its demands inside a file named ""@@@ To Restore Your Files.txt". The ransom note lists no specific ransom amount and expects the victim to contact the ransomware operators. The full note goes as follows:
How To Restore Your Files
* What happend?
----------------------------------------------
Your computers and servers are encrypted, backups are deleted from your network and copied.
We use strong encryption algorithms, so you cannot decrypt your data without us.
But you can restore everything by purchasing a special program from us - a universal decoder.
This program will restore your entire network. Follow our instructions below and you will recover all your data.
If you continue to ignore this for a long time, we will start reporting the hack to mainstream media and posting
your data to the dark web.
* What guarantees?
----------------------------------------------
We value our reputation. If we do not do our work and liabilities, nobody will pay us. This is not in our interests.
All our decryption software is perfectly tested and will decrypt your data. We will also provide support in case of problems.
We guarantee to decrypt one file for free. Go to the site and contact us.
You have three days to contact us otherwise your personal decoder will be deleted and we won't be able to help you!
And your personal data will be public.
* How to contact us?
----------------------------------------------
1) Download for TOX CHAT hxxps://tox.chat/download.html
2) Open chat
Add ID Chat: [alphanumeric string]
Your personal ID: -
If we did not answer you, leave the chat enabled, the operator will contact you!
=============!!!!!!!!!!!!!!!!!!!!!!!!!=============
DO NOT TRY TO RECOVER FILES YOURSELF!
DO NOT MODIFY ENCRYPTED FILES!
OTHERWISE, YOU MAY LOSE ALL YOUR FILES FOREVER!
==============================================
