MNX 勒索軟件是一種新的 Phobos 克隆

MNX 勒索軟件是一個新的克隆，它擴展了 Phobos 勒索軟件變種家族。

MNX 的行為在很大程度上類似於其他最近的 Phobos 克隆。它會加密連接的系統驅動器上的文件並索要贖金。

加密文件經歷了更名，因為 MNX 勒索軟件附加了一個冗長的新擴展名，其中包括用戶的 ID 字符串、黑客使用的電子郵件和“.MNX”字符串。名為“image.jpg”的文件將變成“image.jpg.id[受害者 ID].[decrypt@techie.com].MNX”。

將在受感染系統上加密的文件類型包括常見的文件、媒體文件、檔案和數據庫。

一旦勒索軟件完成對系統的加密，它就會將勒索要求放入兩個名為“info.txt”和“info.hta”的文件中。 HTA 文件顯示在一個彈出窗口中，其中包含更詳盡的贖金記錄版本，內容如下：

All your files have been encrypted!

All your files have been encrypted due to a security problem with your PC. If you want to restore them, write us to the e-mail decrypt at techie dot com

Write this ID in the title of your message -

In case of no answer in 24 hours write us to this e-mail: decrypt123 at sent dot com

You have to pay for decryption in Bitcoins. The price depends on how fast you write to us. After payment we will send you the tool that will decrypt all your files.

Free decryption as guarantee

Before paying you can send us up to 5 files for free decryption. The total size of files must be less than 4Mb (non archived), and files should not contain valuable information. (databases,backups, large excel sheets, etc.)

How to obtain Bitcoins

The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price.

hxxps://localbitcoins.com/buy_bitcoins

Also you can find other places to buy Bitcoins and beginners guide here:

htxxp://www.coindesk.com/information/how-can-i-buy-bitcoins/

Attention!

Do not rename encrypted files.

Do not try to decrypt your data using third party software, it may cause permanent data loss.

Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.