Ransomware note
From extortion.wiki, the ransomware notes archive
- Family
- Darkside
- Original file
- darkside.txt
- Source snapshot
- 2bbf5b4ecda8
- Archive ID
- note-darkside-darkside-txt
A byte-attributed static rendering of the archived source text. Content is escaped, selectable, and inert; extortion.wiki does not execute markup, activate source URLs, submit forms, or load external resources from this document.
Archived note body
Plain text · original whitespace retained
----------- [ Welcome to DarkSide ] ------------->
What happend?
----------------------------------------------
Your computers and servers are encrypted, backups are deleted. We use strong encryption algorithms, so you cannot decrypt your data.
But you can restore everything by purchasing a special program from us - universal decryptor. This program will restore all your network.
Follow our instructions below and you will recover all your data.
What guarantees?
----------------------------------------------
We value our reputation. If we do not do our work and liabilities, nobody will pay us. This is not in our interests.
All our decryption software is perfectly tested and will decrypt your data. We will also provide support in case of problems.
We guarantee to decrypt one file for free. Go to the site and contact us.
How to get access on website?
----------------------------------------------
Using a TOR browser:
1) Download and install TOR browser from this site: https://torproject.org/
2) Open our website: http://dark24zz36xm4y2phwe7yvnkkkkhxionhfrwp67awpb3r3bdcneivoqd.onion/ZWQHXVE7MW9JXE5N1EGIP6IMEFAGC7LNN6WJCBVKJFKB5QXP6LUZV654ASG7977V
When you open our website, put the following data in the input form:
Key:
[snip]
!!! DANGER !!!
DO NOT MODIFY or try to RECOVER any files yourself. We WILL NOT be able to RESTORE them.
!!! DANGER !!!
Related negotiation records
View all 5 recordsAn explicit alias maps the note family Darkside to the Ransomchats actor label Darkside. This relationship does not merge either corpus or its statistics.
| Record ID | Indexed date | Messages | Threat actor |
|---|---|---|---|
| You must pay $ 10000000 220.02 BTC (+20%) or 23879.46 XMR | Apr 18, 2021 | 10 | Darkside |
| You must pay $ 250000 5.51 BTC (+20%) or 603.89 XMR | Apr 13, 2021 | 63 | Darkside |
| 20210215 | Feb 15, 2021 | 24 | Darkside |
| 20201115 | Nov 15, 2020 | 243 | Darkside |
| You need pay $ 2,000,000 190.363 BTC (+10%) or 22537.751 XMR | Aug 11, 2020 | 85 | Darkside |