什麼是 Juli 勒索軟件？

Juli 是屬於 VoidCrypt 家族的勒索軟件，是在檢查提交給 VirusTotal 的惡意軟件樣本時發現的。這種勒索軟件的特殊變體會加密文件，在文件名中附加受害者的 ID、juli1990@mailfence.com 電子郵件地址和 .Juli 擴展名，並投放 unlock-info.txt 贖金票據。

贖金通知指示受害者聯繫 juli1990@mailfence.com 或 juli1992@mailfence.com 電子郵件地址以尋求恢復文件的幫助，並警告嘗試使用第三方軟件恢復文件可能會造成永久性損壞。攻擊者向受害者提供一個免費的解密工具，以換取一個大小和價值不超過 1 MB 的文件。

Juli勒索軟件說明如下：

All your files have been encrypted!

All your files have been encrypted due to a security problem with your PC. If you want to restore them, write us to the e-mail; Juli1990@mailfence.com

Write this ID in the title of your message : -

In case of no answer in 24 hours write us to theese e-mails: Juli1992@mailfence.com

You have to pay for decryption in Bitcoins. The price depends on how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files.

Free decryption as guarantee

Before paying you can send us up to 1 file for free decryption. The total size of files must be less than 1Mb (non archived), and files should not contain valuable information. (databases,backups, large excel sheets, etc.)

How to obtain Bitcoins

The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price.

hxxps://localbitcoins.com/buy_bitcoins

Also you can find other places to buy Bitcoins and beginners guide here:

hxxp://www.coindesk.com/information/how-can-i-buy-bitcoins/

Attention!

Do not rename encrypted files.

Do not try to decrypt your data using third party software, it may cause permanent data loss.

Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.