Fisakalzb 勒索软件扩展了 Snatch 克隆系列

Fisakalzb 勒索软件是 Snatch 勒索软件克隆家族的新成员。

新菌株没有什么壮观或新颖的。它将加密在受害者系统上找到的大多数文件并使它们不可读。

加密文件类型将包括媒体文件、文档、存档文件和可执行文件。一旦文件被加密，它们的原始名称就会附加扩展名“.fisakalzb”。这将使名为“image.jpg”的文件在加密后变成“image.jpg.fisakalzb”。

勒索软件将其赎金记录放入名为“HOW TO RESTORE YOUR FILES.TXT”的文件中。勒索信是用英文写的，内容如下：

Hello!

All your files are encrypted!

Email me if you want to get your files back - I will do it very quickly!

Contact me by email:

NeilAlden1Armstrong14 at swisscows dot email or JohniFlex at airmail dot cc

The subject line must contain an encryption extension or the name of your company!

Do not rename encrypted files, you may lose them forever.

You may be a victim of fraud. Free decryption as a guarantee.

Send us up to 3 files for free decryption.

The total file size should be no more than 1 MB! (not in the archive), and the files should not contain valuable information. (databases, backups, large Excel spreadsheets, etc.)

To contact us, we recommend that you create an email address at protonmail.com or tutanota.com

Because gmail and other public email programs can block our messages!

If you do not receive a response from us for a long time, check your spam folder.

=================================

Customer service TOX ID: [alphanumeric strings]

Only emergency! Use if support is not responding